On February 13, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) issued 20 advisories about serious vulnerabilities in Industrial Control Systems (ICS) and medical devices. These disclosures aim to tackle increasing cyber threats to critical infrastructure and operational technology (OT).
The advisories cover vulnerabilities in products from various manufacturers, including Siemens, Mitsubishi Electric, and ORing. Each advisory offers technical details, identifies risks, and suggests ways to protect systems from exploitation.
By infosecbulletin
/ Saturday , October 24 2026
Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
By infosecbulletin
/ Friday , October 23 2026
The PHP security team shared ways to protect against a new flaw that lets someone run unwanted code on certain...
Read More
By infosecbulletin
/ Friday , October 23 2026
Major US banks have detected unauthorized access to customer accounts by third-party AI agents, with some systems taking actions beyond...
Read More
By infosecbulletin
/ Thursday , October 22 2026
Fortinet has urged customers to prioritize security updates for FortiOS, FortiManager, and FortiAnalyzer scheduled for October 22, 2026. The coordinated...
Read More
By infosecbulletin
/ Wednesday , October 21 2026
Hacker offers to sell Rajasthan Government’s Department of Information Technology & Communication (DoIT&C) data in a underground forum. The threat...
Read More
By infosecbulletin
/ Wednesday , October 21 2026
The PHP team released urgent security updates to fix PHP2Shell, two serious flaws (CVE-2026-109618 and CVE-2026-109619) that let attackers run...
Read More
By infosecbulletin
/ Wednesday , October 21 2026
US President Donald Trump said on Wednesday that companies ​building data centers should pay a "dividend" to the communities ‌where...
Read More
By infosecbulletin
/ Tuesday , October 20 2026
Ransomware groups are using a flaw in Palo Alto Networks GlobalProtect VPN to get around multi-factor authentication and access corporate...
Read More
By infosecbulletin
/ Tuesday , October 20 2026
The U.S. Department of Homeland Security (DHS) ordered federal agencies to stop using DeepSeek products and remove it from all...
Read More
By infosecbulletin
/ Monday , October 19 2026
NSA, CISA, and NIST have released security guidelines to find, control, and stop AI agents that go beyond their allowed...
Read More
Overview of the 20 Advisories:
ICSA-25-044-01 Siemens SIMATIC S7-1200 CPU Family
ICSA-25-044-02 Siemens SIMATIC
ICSA-25-044-03 Siemens SIPROTEC 5
ICSA-25-044-04 Siemens SIPROTEC 5
ICSA-25-044-05 Siemens SIPROTEC 5 Devices
ICSA-25-044-06 Siemens RUGGEDCOM APE1808 Devices
ICSA-25-044-07 Siemens Teamcenter
ICSA-25-044-08 Siemens OpenV2G
ICSA-25-044-09 Siemens SCALANCE W700
ICSA-25-044-10 Siemens Questa and ModelSim
ICSA-25-044-11 Siemens APOGEE PXC and TALON TC Series
ICSA-25-044-12 Siemens SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor
ICSA-25-044-13 Siemens SIMATIC PCS neo and TIA Administrator
ICSA-25-044-14 Siemens Opcenter Intelligence
ICSA-25-044-15 ORing IAP-420
ICSA-25-044-16 mySCADA myPRO Manager
ICSA-25-044-17 Outback Power Mojave Inverter
ICSA-25-044-18 Dingtian DT-R0 Series
ICSA-24-030-02 Mitsubishi Electric FA Engineering Software Products (Update C)
ICSMA-25-044-01 Qardio Heart Health IOS and Android Application and QardioARM A100
CISA urges users and administrators to check the latest ICS advisories for technical information and mitigation strategies.