Threat Intel

OT Security Advisory: Iranian-Affiliated PLC Exploitation and Critical Infrastructure Threats

An Iranian state-directed campaign is actively exploiting a CVSS 9.8 authentication bypass in Rockwell Automation Logix controllers — with no vendor patch available. Critical Start's CRU breaks down the threat, the vulnerability surface, and what OT organizations need to do now.
Critical Start Cyber Research Unit
June 26, 2026
8 min read
Threat Intel

Understanding and Defending Against Zero-Day Vulnerabilities

Zero-day exploitation now precedes disclosure by an average of seven days. Critical Start's Cyber Research Unit breaks down the 2026 threat landscape, the Nightmare Eclipse campaign, and what defenders can actually do when no patch exists.
Critical Start Cyber Research Unit
June 19, 2026
15 min read
Webinar

On-Demand: The AI MDR Shortcut and Why We're Not Taking It

Critical Start's VP of Product and Principal Operations Engineer walk through their real-world approach to AI in the SOC including the Laws of AI, live agent demos, and honest TTI metrics.
Umair Masud and Suhail Rahmetulla
June 16, 2026
40 min
Blog

The Right Layer for AI Is Rarely First

"AI-first" SecOps sounds compelling — until it breaks at scale. Critical Start explains why deterministic systems belong in the first layer, and where AI actually belongs in the stack.
Kimberly Graham
June 9, 2026
4 min read
Blog

MDR vs. AI SecOps: Field Notes from Gartner SRM 2026

Critical Start's CTO shares field notes from Gartner SRM 2026 — breaking down how to choose between AI SecOps platforms and AI-enabled MDR based on your organization's maturity, headcount, and expertise.
Randy Watkins
June 9, 2026
6 min read
Blog

We Built the Foundation First. That’s the Whole Story

The market is racing to put agentic AI into security operations. Critical Start has been building and hardening the foundation it requires for over a decade. Here's what that actually looks like.
Critical Start
June 4, 2026
5 min read