InfoSecBulletin Cybersecurity for mankind
On December 5, 2024, CISA issued two advisories regarding Industrial Control Systems (ICS). These advisories highlight current security issues, vulnerabilities, and exploits in ICS.
Vulnerabilities found in AutomationDirect’s C-More EA9 Programming Software and Planet Technology’s WGS-804HPT switch could severely threaten critical infrastructure if exploited.
Microsoft’s November 2026 Patch Tuesday addresses 1,093 flaws, with Outlook zero-day
Barracuda ESG flaws exploited, gaining root access
Apple, SAP, and Ivanti Patch Critical flaws Affecting Messaging, Bluetooth, and Enterprise Systems
Jailbroken DeepSeek AI Agent Conducts Two-Week Cyberattack on European Telecom
Daily Cyber security update for 10.11. 2026
IBM fixes 208 API Connect vulnerabilities, 47 critical
89 New ransomware groups emerge in 2026, claiming over 2,200 victims
Daily Cyber security update for 08.11. 2026
Japan banking crisis
Outage causes disruption at 128 japan banks: preventing ATM transaction
Daily Cyber security update for 06.11. 2026
ICSA-24-340-01 AutomationDirect C-More EA9 Programming Software:
Exploiting these vulnerabilities could lead to memory corruption and allow remote code execution through a buffer overflow.
ICSA-24-340-02 Planet Technology Planet WGS-804HPT:Â
Exploiting these vulnerabilities could lead to remote code execution.
These vulnerabilities pose serious risks to industrial control systems, prompting vendors and users to quickly implement patches, firmware updates, and secure configurations.
These advisories highlight the increasing risks that ICS devices and software encounter in a changing threat environment.
Vendors and users should work together to fix vulnerabilities by implementing timely updates, strong access controls, and proactive monitoring.
CISA’s report emphasizes the importance of staying alert to secure industrial environments.
