CISA ICS Vulnerability Advisories and Alerts, Updates, and Bulletins – May 9, 2023

CISA ICS Vulnerability Advisories and Alerts, Updates, and Bulletins – May 4, 2023

Vulnerability Awareness – Spike in Attacks against CCTV Products with Critical Five-Year-Old Vulnerability

ICS/OT Ransomware Awareness – Dragos’s Most Recent Industrial Ransomware Analysis Highlights Rising Threat to Industrial Systems

Third-Party Risk Management – Best Practices for Providing Third-Party Access to Your OT Network

(TLP:GREEN) New Cross-Sector ISAC Report: Industrial Control System Vulnerabilities and Impact on Critical Infrastructure

(Update December 15, 2022) Six Added to CISA’s Known Exploited Vulnerabilities Catalog Includes Four Zero Days

Know the Physical Risks Introduced by Potential Cyber Vulnerabilities

Security Awareness – Recent SANS Survey Finds Cyber Defenses are Getting Stronger as Threats to OT/ICS Environments Remain High

Security Awareness – Microsoft Publishes Guidance on Securing IoT Devices against Attacks Targeting Critical Infrastructure

Security Awareness – Dragos’s Latest Industrial Ransomware Analysis Underscores Increasing Threat to Industrial Systems