Decision Insights Threat Desk

EcoStruxure servers and workstations have vulnerabilities that can impact sensitive data security, according to Schneider Electric.

CISA will stop updating Siemens ICS advisories effective Jan. 10, 2023, amid critical vulnerabilities affecting SIVaaS.

CISA issued five advisories on Sept. 4, 2025, detailing vulnerabilities in Industrial Control Systems from various vendors.

A local attacker can exploit an authentication timing vulnerability in the Tomahawk component of Hiawatha versions 8.5-11.7.

CISA and NSA launch joint guidance on Software Bill of Materials (SBOM) to enhance software supply chain security role.

CISA adds CVE-2020-24363 and CVE-2025-55177 to its Known Exploited Vulnerabilities Catalog due to active exploitation concerns.