The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:

ICS Vulnerability Advisories:

CISA Releases One Industrial Control Systems Advisory

Products are used across multiple sectors, please check these latest advisories for specific equipment used across your ICS environments and address accordingly.

• Schneider Electric EcoStruxure Products, Modicon PLCs, and Programmable Automation Controllers – Used in Energy Sector

Alerts, Updates, and Bulletins:

• CISA Adds One Known Exploited Vulnerability to Catalog
• CISA Releases Malware Analysis Reports on Barracuda Backdoors
• Ivanti Releases Security Updates for EPMM to address CVE-2023-35081
• CISA and Partners Release Joint Cybersecurity Advisory on Preventing Web Application Access Control Abuse