Real-time updates on vulnerabilities, threat actor activity, and lessons from the field — curated by the team defending IT, OT, and critical infrastructure every day.
Executive Summary On May 29, 2025, ConnectWise publicly disclosed a cybersecurity breach targeting its ScreenConnect remote access platform. The attack, attributed to a sophisticated…
Read moreCollecting logs isn’t security. And having a tool doesn’t mean you’re protected. What matters is what you do with that information—and how fast you…
Read morehttps://www.criticalpathsecurity.com/wp-content/uploads/2025/05/Ryan.Vargas.Meeting.mp4 In our latest interview with Ryan Vargas, we got a firsthand look at what’s fuelling his drive this season—upcoming races, continued team growth,…
Read moreOn May 21, 2025, CISA and international cybersecurity authorities issued CSA AA25-141A, attributing a sophisticated espionage campaign to GRU Unit 26165 (APT28/Fancy Bear). These…
Read moreThis past weekend marked a historic milestone for Critical Path Security Canada as we hit the track with Ryan Vargas in the NASCAR Canada…
Read moreModern software is built on open-source. Developers rely on public repositories like npm, PyPI, and Maven Central to move fast, avoid reinventing the wheel,…
Read moreAs the 2025 NASCAR Canada Series kicks off in full force, Critical Path Security is proud to support driver Ryan Vargas in his return…
Read moreThis week, Patrick Kelley, CEO of both Léargas Security and Critical Path Security, will be attending Consensus 2025 in Toronto, Ontario. While the companies…
Read moreCritical Path Security – Threat Intelligence Report Date: May 2025Prepared by: Critical Path Security Research Team Executive Summary In a rare and highly consequential…
Read moreContact us today to find out how we can help you minimize risk and keep your business safe and compliant.