(TLP:CLEAR) CISA ICS Advisories, Additional Alerts, Updates, and Bulletins – January 15, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS security advisories, along with additional alerts, updates, and bulletins:

ICS Advisories:

On January 15, 2026, CISA Released Fifteen Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• AVEVA Process Optimization
• Festo Firmware
• Siemens TeleControl Server Basic – Used in Water and Wastewater Systems and Energy
• Siemens SIMATIC and SIPLUS products
• Siemens RUGGEDCOM ROS
• Siemens SINEC Security Monitor
• Siemens RUGGEDCOM APE1808 Devices
• Siemens Industrial Edge Devices
• Siemens Industrial Edge Device Kit
• Schneider Electric EcoStruxure Power Build Rapsody – Used in Energy
• Siemens RUGGEDCOM ROX II
• Siemens SIMATIC CN 4100
• ICONICS Suite and Mitsubishi Electric MC Works64 Products (Update B)
• Mitsubishi Electric Multiple FA Engineering Software Products (Update E)
• Axis Communications Camera Station Pro, Camera Station, and Device Manager (Update A)

On January 13, 2026, CISA Released Four Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• Rockwell Automation 432ES-IG3 Series A
• Rockwell Automation FactoryTalk DataMosaix Private Cloud
• YoSmart YoLink Smart Hub
• Güralp Systems FMUS Series and MIN Series Devices (Update B)

Additional Alerts, Updates, and Bulletins:

• January 13 – CISA Adds One Known Exploited Vulnerability to Catalog
• January 12 – CISA Adds One Known Exploited Vulnerability to Catalog
• Secure Connectivity Principles for Operational Technology (OT)
• Public Webinar: NIST IR 8587 Protecting Tokens and Assertions from Forgery, Theft, and Misuse