Real-time updates on vulnerabilities, threat actor activity, and lessons from the field — curated by the team defending IT, OT, and critical infrastructure every day.
Nation-state actors continue to sharpen their tools and broaden their reach. A newly released Joint Cybersecurity Advisory (CSA) from NSA, CISA, FBI, and allied…
Read moreCritical Path Security is proud to announce that our CEO, Patrick Kelley, has been selected to speak at the 20th Annual API Cybersecurity Conference…
Read moreCisco has released a critical security update addressing an unauthenticated remote code execution (RCE) vulnerability—CVE-2025-20265—in its Secure Firewall Management Center (FMC) Software. With the…
Read moreUnderstanding the Hidden Threat of Burnout In the high-stakes world of cybersecurity, professionals — particularly those in SOC teams and cyber operations — can…
Read moreCRM Security: The Overlooked Risk At Critical Path Security, we’re seeing the same dangerous pattern across industries: companies pour money into CRM platforms to…
Read moreIntroduction The Cybersecurity and Infrastructure Security Agency’s (CISA) Emergency Directive 25-02 has been issued to address a critical post-authentication vulnerability (CVE-2025-53786) affecting Microsoft Exchange…
Read moreIn the latest development in cybersecurity, Microsoft and the Cybersecurity and Infrastructure Security Agency (CISA) have issued an urgent warning about yet another set…
Read moreOperational Technology (OT) systems—such as SCADA, DCS, PLCs, and IIoT—are the backbone of critical infrastructure. These systems, designed for stability and uptime, are increasingly…
Read moreEnterprise security provider SonicWall has issued an urgent advisory urging users of its Gen 7 firewall devices to disable SSL‑VPN services immediately, following a sharp…
Read moreContact us today to find out how we can help you minimize risk and keep your business safe and compliant.