The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS security advisories, along with additional alerts, updates, and bulletins:
ICS Advisories:
On April 3, 2025, CISA Released Five Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:
- Hitachi Energy RTU500 Series – Used in Energy
- Hitachi Energy TRMTracker – Used in Energy
- ABB ACS880 Drives Containing CODESYS RTS
- ABB Low Voltage DC Drives and Power Controllers CODESYS RTS
- B&R APROL
On April 1, 2025, CISA Released Two Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:
- Rockwell Automation Lifecycle Services with Veeam Backup and Replication
- Hitachi Energy MicroSCADA Pro/X SYS600 (Update A)
Additional Alerts, Updates, and Bulletins:
- April 1 - CISA Adds One Known Exploited Vulnerability to Catalog
- March 31 - CISA Adds One Known Exploited Vulnerability to Catalog
- NSA, CISA, FBI, and International Partners Release Cybersecurity Advisory on “Fast Flux,” a National Security Threat
- CISA Releases Malware Analysis Report on RESURGE Malware Associated with Ivanti Connect Secure
Related WaterISAC PIRs: 6, 8
