Decision Insights Threat Desk

CISA released nine ICS advisories covering products including Mitsubishi GX Works2 and Johnson Controls systems.

CISA added CVE-2021-26828 (OpenPLC ScadaBR unrestricted file upload) to its Known Exploited Vulnerabilities Catalog.

CISA and Australia’s ASD publish principles for integrating ML, LLMs, and AI agents into operational technology to address safety and security.

CISA added two Android Framework vulnerabilities to the Known Exploited Vulnerabilities Catalog after evidence of active exploitation.

CISA added CVE-2025-48572 and CVE-2025-48633, Android Framework vulnerabilities, to its Known Exploited Vulnerabilities Catalog.

CISA issued five ICS advisories covering Industrial Video & Control, Iskra iHUB, Mirion Medical EC2 NMIS BioDose, and Mitsubishi Electric products.