(TLP:CLEAR) CISA ICS Advisories, Additional Alerts, Updates, and Bulletins – August 20, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS security advisories, along with additional alerts, updates, and bulletins:

ICS Advisories:

On August 20, 2026, CISA Released One Industrial Control Systems Advisory for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• Johnson Controls Simplex Incident Manager – Used in Energy

On August 18, 2026, CISA Released Two Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• CISA Malcolm
• Siemens Simcenter Nastran – Used in Energy

Additional Alerts, Updates, and Bulletins:

• August 19 – CISA Adds One Known Exploited Vulnerability to Catalog
• August 18 – CISA Adds Four Known Exploited Vulnerabilities to Catalog
• August 17 – CISA Adds One Known Exploited Vulnerability to Catalog
• Defending Against an Active Threat to Siemens S7 Series PLCs
• #StopRansomware: Medusa Ransomware – Update