Real-time updates on vulnerabilities, threat actor activity, and lessons from the field — curated by the team defending IT, OT, and critical infrastructure every day.
On May 21, 2025, CISA and international cybersecurity authorities issued CSA AA25-141A, attributing a sophisticated espionage campaign to GRU Unit 26165 (APT28/Fancy Bear). These…
Read moreThis past weekend marked a historic milestone for Critical Path Security Canada as we hit the track with Ryan Vargas in the NASCAR Canada…
Read moreModern software is built on open-source. Developers rely on public repositories like npm, PyPI, and Maven Central to move fast, avoid reinventing the wheel,…
Read moreAs the 2025 NASCAR Canada Series kicks off in full force, Critical Path Security is proud to support driver Ryan Vargas in his return…
Read moreThis week, Patrick Kelley, CEO of both Léargas Security and Critical Path Security, will be attending Consensus 2025 in Toronto, Ontario. While the companies…
Read moreCritical Path Security – Threat Intelligence Report Date: May 2025Prepared by: Critical Path Security Research Team Executive Summary In a rare and highly consequential…
Read moreSonicWall has issued an urgent security advisory addressing multiple critical vulnerabilities in its Secure Mobile Access (SMA) series. These flaws—now confirmed to be actively…
Read moreA newly discovered technique is being leveraged by threat actors to bypass Endpoint Detection and Response (EDR) protections—specifically those provided by SentinelOne—through an abuse…
Read moreIn March 2025, Cobb County, Georgia, became the target of a significant ransomware attack orchestrated by the Russian-speaking cybercriminal group known as Qilin. This…
Read moreContact us today to find out how we can help you minimize risk and keep your business safe and compliant.