Decision Insights Threat Desk

As of January 10, 2023, CISA stopped updating ICS advisories for Siemens vulnerabilities. A risk in Solid Edge allows remote attacks.

CISA, in collaboration with federal and international partners, has issued an updated Cybersecurity Advisory on Akira ransomware, detailing latest attack methods and prevention strategies.

Rockwell Automation has identified multiple vulnerabilities in the FactoryTalk DataMosaix Private Cloud, urging users to update to secure versions.

Mitsubishi Electric has reported a vulnerability in its MELSEC iQ-F Series that may allow a Denial of Service condition when exploited. Affected models are detailed, and mitigation measures are recommended.

General Industrial Controls has reported vulnerabilities in Lynx+ Gateway, including weak password requirements and missing authentication, which could lead to unauthorized access. CISA recommends defensive measures to mitigate risks, as no public exploitation targeting these vulnerabilities has been documented.

AVEVA has reported a vulnerability in its Edge software that may allow attackers to reverse engineer passwords via weak cryptographic algorithms. Users are advised to upgrade to the latest version and implement specific security measures to mitigate risks.