Skip to content

Industry News & Insights

Speaking at GTBA 2025: Ransomware Threats in Telecom and Broadband

We’re pleased to share that Patrick Kelley, CEO of Critical Path Security and Léargas Security, will be speaking at the 2025 GTBA Annual Meeting of the Membership, hosted by the Georgia Rural Telephone and Broadband Association. 📍 Location: Hammock Beach, Daytona Beach, FL📅 Dates: June 15–19, 2025🗣 Topic: Ransomware in Telecom and Broadband: Real-World Impact and Response Strategies Why This Talk Matters Rural telecommunications

Speaking at GridSecCon 2025: Mental Health in Cybersecurity and the Maslach Burnout Inventory

We’re proud to announce that Patrick Kelley, CEO of Critical Path Security and Léargas Security, will be speaking once again at GridSecCon 2025. His breakout session, titled “Mental Health in Cybersecurity: Leveraging the Maslach Burnout Inventory,” will take place on October 8, 2025, from 3:00 PM to 4:00 PM PT. Why This Talk Matters Cybersecurity is more than threat detection and response—it’s a high-pressure

Inside the Race: Ryan Vargas Talks CTMP, Team Progress, and the Road Ahead

In our latest interview with Ryan Vargas, we got a firsthand look at what’s fuelling his drive this season—upcoming races, continued team growth, and the strong foundation built through our ongoing partnership with Léargas Security. All Eyes on Chicago and CanadaRyan shared his excitement about the next stops on the schedule: Chicago and Canada. With travel plans in motion and preparations underway, the team is

VMware Cloud Foundation Security Advisory: Multiple High-Severity Vulnerabilities (VMSA-2025-0009)

Publication Date: May 20, 2025 Severity Rating: High Affected Product: VMware Cloud Foundation (Versions 4.5.x and 5.x) CVE Identifiers: CVE-2025-41229, CVE-2025-41230, CVE-2025-41231 CVSS Scores: 7.3 – 8.2 Executive Summary Critical security vulnerabilities have been discovered in VMware Cloud Foundation, posing significant risks. These include directory traversal (CVE-2025-41229, CVSS 8.2), information disclosure (CVE-2025-41230, CVSS 7.5), and missing authorization (CVE-2025-41231, CVSS 7.3). Immediate patching is strongly

A UK Breach, A US Warning: Scattered Spider’s Growing Threat to Retail – and How to Prepare

The recent cyberattack on Marks & Spencer (M&S), allegedly carried out by the threat group Scattered Spider, isn’t just a UK incident—it’s a stark warning for U.S. retailers. This group demonstrates a pattern of targeting specific sectors in waves, and with UK retail currently under siege, U.S. businesses should be actively preparing for potential targeting. What Happened at M&S? A Deep Dive Scattered Spider’s

Leargas Critical Infrastructure Alert: Enhancing the Security of Operational Technology and Industrial Control Systems

Leargas Critical Infrastructure Alert: Enhancing the Security of Operational Technology and Industrial Control Systems Critical infrastructure poses a challenge not only in deployment, maintenance, uptime, but also the risk of cyberattacks is significant. We will address some key ways to reduce risk and attack surface for this challenging environment. Also it is worth noting that we see alerts from government agencies, cybersecurity, and threat