The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:

ICS Vulnerability Advisories:

CISA Releases Six Industrial Control Systems Advisories

Products are used across multiple sectors, please check these latest advisories for specific equipment used across your ICS environments and address accordingly.

• APsystems Energy Communication Unit (ECU-C) Power Control Software – Used in Energy Sector
• Crestron AM-300
• Voltronic Power ViewPower Pro
• Westermo Lynx 206-F2G
• Lantronix XPort – Used in Energy Sector
• Orthanc Osimis DICOM Web Viewer

Alerts, Updates, and Bulletins:

• Apple Releases Security Updates for Multiple Products
• January 23 - CISA Adds One Known Exploited Vulnerability to Catalog
• January 22 - CISA Adds One Known Exploited Vulnerability to Catalog
• CISA Issues Emergency Directive on Ivanti Vulnerabilities