CISA unveils 25 new advisories for Industrial Control Systems

CISA issued 25 ICS advisories on September 12, 2024, detailing current security issues, vulnerabilities, and exploits in Industrial Control Systems.

ICSA-24-256-01 Siemens SINEMA Remote Connect Server
ICSA-24-256-02 Siemens SINUMERIK ONE, SINUMERIK 840D and SINUMERIK 828D
ICSA-24-256-03 Siemens User Management Component (UMC)
ICSA-24-256-04 Siemens SINUMERIK Systems
ICSA-24-256-05 Siemens Mendix Runtime
ICSA-24-256-06 Siemens Automation License Manager
ICSA-24-256-07 Siemens SIMATIC RFID Readers
ICSA-24-256-08 Siemens Industrial Products
ICSA-24-256-09 Siemens SIMATIC, SIPLUS, and TIM
ICSA-24-256-10 Siemens SINEMA
ICSA-24-256-11 Siemens Industrial Edge Management
ICSA-24-256-12 Siemens Tecnomatix Plant Simulation
ICSA-24-256-13 Siemens SCALANCE W700
ICSA-24-256-14 Siemens SIMATIC SCADA and PCS 7 Systems
ICSA-24-256-15 Siemens Industrial Products
ICSA-24-256-16 Siemens Third Party Component in SICAM and SITIPE Products
ICSA-24-256-17 AutomationDirect DirectLogic H2-DM1E
ICSA-24-256-18 Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix 5380
ICSA-24-256-19 Rockwell Automation OptixPanel
ICSA-24-256-20 Rockwell Automation AADvance Trusted SIS Workstation
ICSA-24-256-21 Rockwell Automation 5015-U8IHFT
ICSA-24-256-22 Rockwell Automation FactoryTalk Batch View
ICSA-24-256-23 Rockwell Automation FactoryTalk View Site
ICSA-24-256-24 Rockwell Automation Pavilion8
ICSA-24-256-25 Rockwell Automation ThinManager

• Hot Topic

WhatsApp banned on all US House of Representatives devices

By F2 / Tuesday , June 24 2025

The U.S. House of Representatives has banned congressional staff from using WhatsApp on government devices due to security concerns, as...

Read More

• Alert

Kaspersky found “SparkKitty” Malware on Google Play, Apple App Store

By F2 / Tuesday , June 24 2025

Kaspersky found a new mobile malware dubbed SparkKitty in Google Play and Apple App Store apps, targeting Android and iOS....

Read More

• International

OWASP AI Testing Guide Launched to Uncover Vulns in AI Systems

By F2 / Tuesday , June 24 2025

OWASP has released its AI Testing Guide, a framework to help organizations find and fix vulnerabilities specific to AI systems....

Read More

• Bank
• National

Axentec Launches Bangladesh’s First Locally Hosted Tier-4 Cloud Platform

By F2 / Tuesday , June 24 2025

In a major milestone for the country’s digital infrastructure, Axentec PLC has officially launched Axentec Cloud, Bangladesh’s first Tier-4 cloud...

Read More

• Alert
• Cyber Attack

Hackers Bypass Gmail MFA With App-Specific Password Reuse

By infosecbulletin / Monday , June 23 2025

A hacking group reportedly linked to Russian government has been discovered using a new phishing method that bypasses two-factor authentication...

Read More

• Cyber Attack

Russia detects first SuperCard malware attacks via NFC

By infosecbulletin / Wednesday , June 18 2025

Russian cybersecurity experts discovered the first local data theft attacks using a modified version of legitimate near field communication (NFC)...

Read More

• Cyber Attack
• Data Breach

Income Property Investments exposes 170,000+ Individuals record

By infosecbulletin / Tuesday , June 17 2025

Cybersecurity researcher Jeremiah Fowler discovered an unsecured database with 170,360 records belonging to a real estate company. It contained personal...

Read More

• Alert
• Cyber Attack
• Vulnerabilities

ALERT (CVE: 2023-28771)
Zyxel Firewalls Under Attack via CVE-2023-28771 by 244 IPs

By infosecbulletin / Tuesday , June 17 2025

GreyNoise found attempts to exploit CVE-2023-28771, a vulnerability in Zyxel's IKE affecting UDP port 500. The attack centers around CVE-2023-28771,...

Read More

• Alert
• Vulnerabilities

CISA Flags Active Exploits in Apple iOS and TP-Link Routers

By infosecbulletin / Tuesday , June 17 2025

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently included two high-risk vulnerabilities in its Known Exploited Vulnerabilities (KEV)...

Read More

• Data Breach

10K Records Allegedly from Mac Cloud Provider’s Customers Leaked Online

By infosecbulletin / Monday , June 16 2025

SafetyDetectives’ Cybersecurity Team discovered a public post on a clear web forum in which a threat actor claimed to have...

Read More

CISA advises users and administrators to check the latest ICS advisories for technical information and solutions.