CISA ICS Vulnerability Advisories and Alerts, Updates, and Bulletins – December 21, 2023

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:

ICS Vulnerability Advisories:

CISA Releases Two Industrial Control Systems Advisories

Products are used across multiple sectors, please check these latest advisories for specific equipment used across your ICS environments and address accordingly.

• FXC AE1021/AE1021PE
• QNAP VioStor NVR

Alerts, Updates, and Bulletins:

• CISA Adds Two Known Exploited Vulnerabilities to Catalog
• CISA Releases Microsoft 365 Secure Configuration Baselines and SCuBAGear Tool
• Apple Releases Security Updates for Multiple Products
• Mozilla Releases Security Updates for Firefox and Thunderbird