The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS security advisories, along with additional alerts, updates, and bulletins:

ICS Advisories:

• On December 3, 2024, CISA Released Eight Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:
  • Ruijie Reyee OS
  • Siemens RUGGEDCOM APE1808 – Used in Energy
  • Open Automation Software
  • ICONICS and Mitsubishi Electric GENESIS64 Products
  • Fuji Electric Monitouch V-SFT – Used in Energy
  • Fuji Electric Tellus Lite V-Simulator
  • ETIC Telecom Remote Access Server (RAS) (Update B) – Used in Energy
  • ICONICS and Mitsubishi Electric Products (Update A)

Additional Alerts, Updates, and Bulletins:

• CISA Adds Three Known Exploited Vulnerabilities to Catalog
• CISA and Partners Release Joint Guidance on PRC-Affiliated Threat Actor Compromising Networks of Global Telecommunications Providers