Signal

CISA published eight advisories addressing security issues and vulnerabilities across various Industrial Control Systems including AutomationDirect, Schneider Electric, and others, urging users and administrators to review technical details and mitigation strategies.

CISA updates KEV Catalog with two new vulnerabilities affecting Adobe Commerce and Microsoft WSUS after active exploitation evidence.

Microsoft released an out-of-band security update to address a critical remote code execution vulnerability in Windows Server Update Service (WSUS) affecting multiple Windows Server versions. CISA advises organizations to identify vulnerable servers, apply the update, monitor for exploit activity, and use mitigations if updates cannot be applied immediately.

CISA adds two Dassault Systèmes DELMIA Apriso vulnerabilities to Known Exploited Vulnerabilities Catalog for active exploitation.

CISA issued three advisories addressing vulnerabilities in Schneider Electric and Vertikal Systems ICS products, urging review for mitigation.

CISA and partners issued best practices to secure on-premises Microsoft Exchange servers and advise retiring outdated systems.