CISA unveils 25 new advisories for Industrial Control Systems

CISA issued 25 ICS advisories on September 12, 2024, detailing current security issues, vulnerabilities, and exploits in Industrial Control Systems.

ICSA-24-256-01 Siemens SINEMA Remote Connect Server
ICSA-24-256-02 Siemens SINUMERIK ONE, SINUMERIK 840D and SINUMERIK 828D
ICSA-24-256-03 Siemens User Management Component (UMC)
ICSA-24-256-04 Siemens SINUMERIK Systems
ICSA-24-256-05 Siemens Mendix Runtime
ICSA-24-256-06 Siemens Automation License Manager
ICSA-24-256-07 Siemens SIMATIC RFID Readers
ICSA-24-256-08 Siemens Industrial Products
ICSA-24-256-09 Siemens SIMATIC, SIPLUS, and TIM
ICSA-24-256-10 Siemens SINEMA
ICSA-24-256-11 Siemens Industrial Edge Management
ICSA-24-256-12 Siemens Tecnomatix Plant Simulation
ICSA-24-256-13 Siemens SCALANCE W700
ICSA-24-256-14 Siemens SIMATIC SCADA and PCS 7 Systems
ICSA-24-256-15 Siemens Industrial Products
ICSA-24-256-16 Siemens Third Party Component in SICAM and SITIPE Products
ICSA-24-256-17 AutomationDirect DirectLogic H2-DM1E
ICSA-24-256-18 Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix 5380
ICSA-24-256-19 Rockwell Automation OptixPanel
ICSA-24-256-20 Rockwell Automation AADvance Trusted SIS Workstation
ICSA-24-256-21 Rockwell Automation 5015-U8IHFT
ICSA-24-256-22 Rockwell Automation FactoryTalk Batch View
ICSA-24-256-23 Rockwell Automation FactoryTalk View Site
ICSA-24-256-24 Rockwell Automation Pavilion8
ICSA-24-256-25 Rockwell Automation ThinManager

• Alert

Microsoft Patches Four Critical Azure and Power Apps Vulns

By infosecbulletin / Friday , May 9 2025

Microsoft has fixed critical vulnerabilities in its core cloud services, including Azure Automation, Azure Storage, Azure DevOps, and Microsoft Power...

Read More

• Uncategorized

Qilin Ransomware topped April 2025 with 45+ data leak disclosures

By infosecbulletin / Thursday , May 8 2025

The cyber threat landscape is rapidly changing, with a notable increase in ransomware activity in April 2025, driven by the...

Read More

• Alert
• Vulnerabilities

SonicWall Patches 3 Flaws in SMA 100 Devices

By infosecbulletin / Thursday , May 8 2025

SonicWall has released patches for three security flaws in SMA 100 Secure Mobile Access appliances that could allow remote code...

Read More

• Cyber Attack
• Ransomware

Top Ransomware Actively Attacking Financial Sector: 406 Incidents Disclosed

By infosecbulletin / Thursday , May 8 2025

From April 2024 to April 2025, Flashpoint analysts noted that the financial sector was a major target for threat actors,...

Read More

• Alert
• Vulnerabilities

Critical (CVSS 10) Flaw in Cisco IOS XE WLCs Allows RRA

By infosecbulletin / Thursday , May 8 2025

Cisco has issued a security advisory for a critical vulnerability in its IOS XE Software for Wireless LAN Controllers (WLCs)....

Read More

• Alert
• Hot Topic
• International

CVE-2025-29824
Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day

By infosecbulletin / Wednesday , May 7 2025

Attackers linked to the Play ransomware operation deployed a zero-day privilege escalation exploit during an attempted attack against an organization...

Read More

• Alert

Hacker exploited Samsung MagicINFO 9 Server RCE flaw

By infosecbulletin / Wednesday , May 7 2025

Hackers are exploiting an unauthenticated remote code execution vulnerability in the Samsung MagicINFO 9 Server to take control of devices...

Read More

• Alert

CISA adds Langflow flaw to its KEV catalog

By infosecbulletin / Tuesday , May 6 2025

CISA added the Langflow vulnerability, CVE-2025-3248 (CVSS score 9.8), to its Known Exploited Vulnerabilities catalog. Langflow is a popular tool...

Read More

• Alert
• Vulnerabilities

Google Fixes Android Flaw (CVE-2025-27363) Exploited by Attackers

By infosecbulletin / Tuesday , May 6 2025

Google has released its monthly Android security updates, addressing 46 vulnerabilities, including one that has been actively exploited. CVE-2025-27363 (CVSS...

Read More

• Event

UAP hosted “UAP Cyber Siege 2025”, A national level cybersecurity competition

By infosecbulletin / Tuesday , May 6 2025

The Cyber Security Club, representing the Department of Computer Science and Engineering at the University of Asia Pacific (UAP), has...

Read More

CISA advises users and administrators to check the latest ICS advisories for technical information and solutions.