The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS security advisories, along with additional alerts, updates, and bulletins:
ICS Advisories:
- On January 10, 2025, CISA Released Four Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:
- Schneider Electric PowerChute Serial Shutdown
- Schneider Electric Harmony HMI and Pro-face HMI Products – Used in Water and Wastewater Systems and Energy
- Delta Electronics DRASimuCAD
- Rockwell Automation Arena (Update A)
- On January 14, 2025, CISA Released Four Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:
- Hitachi Energy FOXMAN-UN – Used in Energy
- Schneider Electric Vijeo Designer – Used in Energy
- Schneider Electric EcoStruxure – Used in Energy
- Belledonne Communications Linphone-Desktop
Additional Alerts, Updates, and Bulletins
- 01/13/2025: CISA Adds Two Known Exploited Vulnerabilities to Catalog
- Ivanti Releases Security Updates for Multiple Products
- Fortinet Releases Security Updates for Multiple Products
- CISA Releases the JCDC AI Cybersecurity Collaboration Playbook and Fact Sheet
- CISA and US and International Partners Publish Guidance on Priority Considerations in Product Selection for OT Owners and Operators
- CISA Releases the Cybersecurity Performance Goals Adoption Report