CISA reveals 2 Industrial Control Systems Advisories

On October 1, 2024, CISA released two advisories regarding Industrial Control Systems (ICS), highlighting current security issues, vulnerabilities, and exploits in the field.

ICSA-24-275-01 Optigo Networks ONS-S8 Spectra Aggregation Switch:

• Alert
• Hot Topic
• Vulnerabilities

Intel PC, laptop and server processors affected for 6 years: Report

By infosecbulletin / Saturday , May 17 2025

A new class of vulnerabilities in Intel processors, called Branch Predictor Race Conditions (BPRC), enables attackers to extract sensitive data...

Read More

• Alert

CVSS 10.0 Flaw
Critical flaw in Siemens OZW Web Servers Enable Unauthenticated RCE

By infosecbulletin / Wednesday , May 14 2025

Siemens issued a security advisory (SSA-047424) for two serious vulnerabilities—CVE-2025-26389 and CVE-2025-26390—impacting the OZW672 and OZW772 web servers. These servers...

Read More

• Alert

Microsoft Patch Tuesday May 2025: 72 flaws, 5 Actively Exploited Zero-Day

By infosecbulletin / Wednesday , May 14 2025

Microsoft has released its Patch Tuesday updates for May 2025, addressing a total of 78 vulnerabilities across its product ecosystem,...

Read More

• National

OTP glitch disrupted NID services across the country

By infosecbulletin / Tuesday , May 13 2025

NID services in Bangladesh are temporarily suspended due to issues with delivering One-Time Passwords (OTP) needed to access the NID...

Read More

• International

Google to pay Texas $1.4 billion for location tracking practices

By infosecbulletin / Monday , May 12 2025

Google will pay about $1.4 billion to Texas to settle two lawsuits regarding location tracking and biometric data storage without...

Read More

• International

YouTube geo-blocks at least 4 Bangladeshi TV channels in India

By infosecbulletin / Friday , May 9 2025

YouTube has restricted access to at least four Bangladeshi television channels in India following a takedown request from the Indian...

Read More

• Alert

Microsoft Patches Four Critical Azure and Power Apps Vulns

By infosecbulletin / Friday , May 9 2025

Microsoft has fixed critical vulnerabilities in its core cloud services, including Azure Automation, Azure Storage, Azure DevOps, and Microsoft Power...

Read More

• Uncategorized

Qilin Ransomware topped April 2025 with 45+ data leak disclosures

By infosecbulletin / Thursday , May 8 2025

The cyber threat landscape is rapidly changing, with a notable increase in ransomware activity in April 2025, driven by the...

Read More

• Alert
• Vulnerabilities

SonicWall Patches 3 Flaws in SMA 100 Devices

By infosecbulletin / Thursday , May 8 2025

SonicWall has released patches for three security flaws in SMA 100 Secure Mobile Access appliances that could allow remote code...

Read More

• Cyber Attack
• Ransomware

Top Ransomware Actively Attacking Financial Sector: 406 Incidents Disclosed

By infosecbulletin / Thursday , May 8 2025

From April 2024 to April 2025, Flashpoint analysts noted that the financial sector was a major target for threat actors,...

Read More

Successful exploitation of these vulnerabilities could allow an attacker to achieve remote code execution, arbitrary file upload, or bypass authentication.

ICSA-24-275-02 Mitsubishi Electric MELSEC iQ-F FX5-OPC:

Successful exploitation of this vulnerability could allow a remote attacker to cause a Denial-of-Service (DoS) condition on the product by getting a legitimate user to import a specially crafted PKCS#12 format certificate.

CISA advises users and administrators to check the latest ICS advisories for technical information and mitigations.