(TLP:CLEAR) CISA ICS Advisories, Additional Alerts, Updates, and Bulletins – October 22, 2026
Created: Thursday, October 22, 2026 - 13:08
Categories: Cybersecurity, Federal & State Resources, OT-ICS Security
The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS security advisories, along with additional alerts, updates, and bulletins:
ICS Advisories:
On October 20, 2026, CISA Released Six Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:
- HMS Networks PEAK-System PCAN Windows drivers – Used in Energy
- WAGO OS Linux
- Moxa AIG-302 ThingsPro Edge – Used in Water and Wastewater Systems and Energy
- Hitachi Energy MicroSCADA X SYS600 Product – Used in Energy
- Hitachi Energy RTU500 Product
- Hitachi Energy RTU500 Product (Update A)
Additional Alerts, Updates, and Bulletins:
- October 20 – CISA Adds Six Known Exploited Vulnerabilities to Catalog
- October 16 – CISA Adds Two Known Exploited Vulnerabilities to Catalog
- October 15 – CISA Adds One Known Exploited Vulnerability to Catalog
- Critical Vulnerabilities in PHP Require Immediate Patching
- CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support
- #StopRansomware: SafePay Ransomware
- Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials
- Managing AI Token Consumption for Operational Resilience