The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:
ICS Vulnerability Advisories:
CISA Releases One Industrial Control Systems Advisory
Products are used across multiple sectors, please check these latest advisories for specific equipment used across your ICS environments and address accordingly.
- AVEVA PI Server
Alerts, Updates, and Bulletins:
- January 18 - CISA Adds One Known Exploited Vulnerability to Catalog
- Atlassian Releases Security Updates for Multiple Products
- Citrix Releases Security Updates for NetScaler ADC and NetScaler Gateway
- Incident Response Guide for the WWS Sector
- Drupal Releases Security Advisory for Drupal Core
- Oracle Releases Critical Patch Update Advisory for January 2024
- January 17 - CISA Adds Three Known Exploited Vulnerabilities to Catalog
- VMware Releases Security Advisory for Aria Operations