Eight New ICS Advisories released by CISA

CISA has released eight advisories on vulnerabilities in Industrial Control Systems (ICS). These vulnerabilities affect essential software and hardware in different industries, risking service disruptions, unauthorized access, and malicious code execution.

ICSA-24-354-01 Hitachi Energy RTU500 series CMU
ICSA-24-354-02 Hitachi Energy SDM600
ICSA-24-354-03 Delta Electronics DTM Soft
ICSA-24-354-04 Siemens User Management Component
ICSA-24-354-05 Tibbo AggreGate Network Manager
ICSA-24-354-06 Schneider Electric Accutech Manager
ICSA-24-354-07 Schneider Electric Modicon Controllers
ICSMA-24-354-01 Ossur Mobile Logic Application

• Alert

PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation

By infosecbulletin / Friday , October 23 2026

The PHP security team shared ways to protect against a new flaw that lets someone run unwanted code on certain...

Read More

• Hot Topic

US banks faced unauthorized access by AI agents in customer accounts: Axios reports

By infosecbulletin / Friday , October 23 2026

Major US banks have detected unauthorized access to customer accounts by third-party AI agents, with some systems taking actions beyond...

Read More

• Alert

Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager

By infosecbulletin / Thursday , October 22 2026

Fortinet has urged customers to prioritize security updates for FortiOS, FortiManager, and FortiAnalyzer scheduled for October 22, 2026. The coordinated...

Read More

• Cyber Attack
• Data Breach

Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed

By infosecbulletin / Wednesday , October 21 2026

Hacker offers to sell Rajasthan Government’s Department of Information Technology & Communication (DoIT&C) data in a underground forum. The threat...

Read More

• Alert

Update now! PHP2Shell: Critical PHP vulnerabilities patched

By infosecbulletin / Wednesday , October 21 2026

The PHP team released urgent security updates to fix PHP2Shell, two serious flaws (CVE-2026-109618 and CVE-2026-109619) that let attackers run...

Read More

• Hot Topic

Trump says data centres should pay dividends to local community

By infosecbulletin / Wednesday , October 21 2026

US President Donald Trump said on Wednesday that companies ​building data centers should pay a "dividend" to the communities ‌where...

Read More

• Alert
• Cyber Attack

Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257

By infosecbulletin / Tuesday , October 20 2026

Ransomware groups are using a flaw in Palo Alto Networks GlobalProtect VPN to get around multi-factor authentication and access corporate...

Read More

• Hot Topic

DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools

By infosecbulletin / Tuesday , October 20 2026

The U.S. Department of Homeland Security (DHS) ordered federal agencies to stop using DeepSeek products and remove it from all...

Read More

• Hot Topic

CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines

By infosecbulletin / Monday , October 19 2026

NSA, CISA, and NIST have released security guidelines to find, control, and stop AI agents that go beyond their allowed...

Read More

• Hot Topic

Claude AI Cracks 25-Year NSA Cryptography Number Mystery in Just 30 Minutes

By infosecbulletin / Sunday , October 18 2026

Anthropic says a Claude research model showed how the National Security Agency made seeds for five NIST elliptic curves in...

Read More

Exploits targeting industrial control systems (ICS) can cause major issues like operational disruptions, financial losses, and safety risks.

Organizations should prioritize applying vendor updates, enhance network segmentation, and closely monitor systems for potential attacks.

Hacker claim ransomware attack on Indonesia’s state bank BRI