CISA ICS Advisories, Additional Alerts, Updates, and Bulletins – October 31, 2024

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS security advisories, along with additional alerts, updates, and bulletins:

ICS Advisories:

• On October 31, 2024, CISA Released Four Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:
  • Rockwell Automation FactoryTalk ThinManager
  • Mitsubishi Electric FA Engineering Software Products (Update A)
  • Mitsubishi Electric Multiple FA Engineering Software Products (Update A)
  • Mitsubishi Electric MELSEC iQ-R Series/iQ-F Series (Update B)

Additional Alerts, Updates, and Bulletins:

• Foreign Threat Actor Conducting Large-Scale Spear-Phishing Campaign with RDP Attachments
• Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation
• JCDC’s Industry-Government Collaboration Speeds Mitigation of CrowdStrike IT Outage