The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:

ICS Vulnerability Advisories:

CISA Releases Five Industrial Control Systems Advisories

Products are used across multiple sectors, please check these latest advisories for specific equipment used across your ICS environments and address accordingly.

• Mitsubishi Electric FA Engineering Software Products
• Schweitzer Engineering Laboratories SEL-411L – Used in Energy Sector
• Johnson Controls Metasys and Facility Explorer
• ControlbyWeb Relay
• Sierra Wireless AirLink with ALEOS firmware – Used in Energy and Water and Wastewater Systems Sectors

Alerts, Updates, and Bulletins:

• CISA and International Partners Release Advisory on Russia-based Threat Actor Group, Star Blizzard
• CISA Releases Joint Guide for Software Manufacturers: The Case for Memory Safe Roadmaps