(TLP:CLEAR) CISA ICS Advisories, Additional Alerts, Updates, and Bulletins – September 25, 2025
Created: Thursday, September 25, 2025 - 14:35
Categories: Cybersecurity, Federal & State Resources, OT-ICS Security
The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS security advisories, along with additional alerts, updates, and bulletins:
ICS Advisories:
On September 25, 2025, CISA Released One Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:
- Dingtian DT-R002
On September 23, 2025, CISA Released Six Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:
- AutomationDirect CLICK PLUS
- Mitsubishi Electric MELSEC-Q Series CPU Module
- Schneider Electric SESU – Used in Water and Wastewater Systems and Energy
- Viessmann Vitogate 300
- Hitachi Energy RTU500 Series Product (Update A) – Used in Energy
- Hitachi Energy RTU500 Series (Update B) – Used in Energy
Additional Alerts, Updates, and Bulletins:
- September 23 –CISA Adds One Known Exploited Vulnerability to Catalog
- CISA Directs Federal Agencies to Identify and Mitigate Potential Compromise of Cisco Devices
- Widespread Supply Chain Compromise Impacting npm Ecosystem
- CISA Releases Advisory on Lessons Learned from an Incident Response Engagement
- SonicWall Releases Advisory for Customers after Security Incident