Real-time updates on vulnerabilities, threat actor activity, and lessons from the field — curated by the team defending IT, OT, and critical infrastructure every day.
Overview Since mid‑July 2025, there has been a marked increase in Akira ransomware attacks exploiting SonicWall SSL VPN connections. Multiple security research teams, including…
Read moreWhat Happened? On July 31, 2025, TechCrunch reported a troubling development: public shared ChatGPT conversations were discoverable through search engines like Google and Bing…
Read moreCritical Path Security is proud to announce that our own Patrick Kelley will be taking the stage at BSidesAugusta 2025 to deliver a talk…
Read moreThis past weekend at Calabogie Motorsports Park was a reminder that in both racing and cybersecurity, you can bring your absolute best — but…
Read moreWe are proud to announce that Patrick Kelley, CEO of Critical Path Security, will be the opening speaker at this year’s Minnesota Power Systems…
Read moreOrganizations leveraging Fortinet FortiGate or Citrix Netscaler technologies should be aware of active exploitation attempts originating from the IP range 178.22.24.0/24, attributed to AS209290…
Read moreSonicWall has issued a security advisory addressing a critical vulnerability in its SMA 100 series VPN appliances that could allow authenticated attackers to execute…
Read moreResearchers have identified a new phishing technique that leverages Microsoft 365’s Direct Send feature. This method allows attackers to send internal-looking emails—without account compromise—bypassing…
Read moreSummary Microsoft has confirmed active exploitation of a critical on-premises SharePoint vulnerability, CVE‑2025‑53770—a variant of the previously identified CVE‑2025‑49706. This vulnerability allows unauthenticated remote…
Read moreContact us today to find out how we can help you minimize risk and keep your business safe and compliant.