CISA Releases 6 ICS Advisories Detailing Security Issues

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) released 6 advisories for Industrial Control Systems (ICS), highlighting vulnerabilities in various critical systems.

These advisories are intended to alert organizations to potential risks that could result in unauthorized access, system breaches, or exposure of sensitive data if not properly addressed.

• Alert
• Cyber Attack

ISPAB president “whatsapp” got hacked via phishing link

By infosecbulletin / Wednesday , April 23 2025

Imdadul Haque, the president of Internet Service Provider of Bangladesh (ISPAB) said, I automatically got back my WhatsApp account. What...

Read More

• Alert
• Vulnerabilities

Zyxel released patches 2 vulns in its USG FLEX H series firewalls

By infosecbulletin / Wednesday , April 23 2025

Zyxel Networks has issued critical security patches for two high-severity vulnerabilities in its USG FLEX H series firewalls. These flaws...

Read More

• Data Breach
• Hot Topic

South Korea’s largest SK Telecom Hit by Malware: SIM-related info leaked

By infosecbulletin / Wednesday , April 23 2025

South Korea's largest mobile operator, SK Telecom, is warning that a malware infection allowed threat actors to access sensitive USIM-related...

Read More

• Alert

ChatGPT Develops Exploit for CVEs Before Public PoCs Share

By infosecbulletin / Wednesday , April 23 2025

Security researcher Matt Keeley showed that artificial intelligence can now develop working exploits for critical vulnerabilities before public proof-of-concept (PoC)...

Read More

• Alert
• Vulnerabilities

TP-Link Router Vulns Allow to Execute Malicious SQL Commands

By infosecbulletin / Tuesday , April 22 2025

Several vulnerabilities have been found in TP-Link routers, exposing users to serious security risks from SQL injection flaws in their...

Read More

• Alert
• Hot Topic

SSL.com’s domain validation system’s bug found: Hacker exploited

By infosecbulletin / Tuesday , April 22 2025

SSL.com has revealed a major security flaw in its domain validation system, which could enable attackers to acquire fake SSL...

Read More

• International

Amazon Follows Microsoft’s Lead, Halts Some Data Center Deals

By infosecbulletin / Tuesday , April 22 2025

Amazon has paused some data center lease negotiations for its cloud division, particularly in international markets, according to Wells Fargo...

Read More

• Alert
• Cyber Attack

Hackers Exploit Zoom’s Remote Control Feature for System Access

By infosecbulletin / Monday , April 21 2025

ELUSIVE COMET is a threat actor conducting a sophisticated attack campaign that uses Zoom's remote control feature to access victims'...

Read More

• Event

Registration open for ‘𝐔𝐀𝐏 𝐂𝐘𝐁𝐄𝐑 𝐒𝐈𝐄𝐆𝐄 𝟐𝟎𝟐𝟓’

By infosecbulletin / Monday , April 21 2025

𝐓𝐡𝐞 𝐂𝐲𝐛𝐞𝐫 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐂𝐥𝐮𝐛 of University of Asia Pacific (UAP) is going to arrange ‘𝐔𝐀𝐏 𝐂𝐘𝐁𝐄𝐑 𝐒𝐈𝐄𝐆𝐄 𝟐𝟎𝟐𝟓’ 𝐂𝐚𝐩𝐭𝐮𝐫𝐞 𝐓𝐡𝐞...

Read More

• Alert
• Vulnerabilities

Samsung phone is saving your passwords in plain text

By infosecbulletin / Sunday , April 20 2025

You copy a password from your manager, thinking it's safe. Meanwhile, your phone is saving it in plain text. Samsung...

Read More

The following provides details of each advisory, including the identified vulnerabilities and recommended mitigation measures.

ICSA-25-023-01 mySCADA myPRO Manager
ICSA-25-023-02 Hitachi Energy RTU500 Series Product
ICSA-25-023-03 Schneider Electric EVlink Home Smart and Schneider Charge
ICSA-25-023-04 Schneider Electric Easergy Studio
ICSA-25-023-05 Schneider Electric EcoStruxure Power Build Rapsody
ICSA-25-023-06 HMS Networks Ewon Flexy 202

CISA encourages users and administrators to review newly released ICS advisories for technical details and mitigations.