Decision Insights Threat Desk

CISA published eight advisories addressing security issues and vulnerabilities across various Industrial Control Systems including AutomationDirect, Schneider Electric, and others, urging users and administrators to review technical details and mitigation strategies.

CISA updates KEV Catalog with two new vulnerabilities affecting Adobe Commerce and Microsoft WSUS after active exploitation evidence.

Microsoft released an out-of-band security update to address a critical remote code execution vulnerability in Windows Server Update Service (WSUS) affecting multiple Windows Server versions. CISA advises organizations to identify vulnerable servers, apply the update, monitor for exploit activity, and use mitigations if updates cannot be applied immediately.

CISA adds two Dassault Systèmes DELMIA Apriso vulnerabilities to Known Exploited Vulnerabilities Catalog for active exploitation.

CISA and partners issued best practices to secure on-premises Microsoft Exchange servers and advise retiring outdated systems.

CISA published two advisories addressing security issues related to Industrial Control Systems, specifically focusing on ISO 15118-2 and Hitachi Energy TropOS. The advisories include technical details and mitigation recommendations for users and administrators.