Signal

CISA published an advisory on October 14, 2025, detailing security issues related to Rockwell Automation's 1715 EtherNet/IP Comms Module.

CISA added five vulnerabilities to its Known Exploited Vulnerabilities Catalog, including Microsoft and IGEL flaws. CVE-2025-6264 was removed.

CISA issued Emergency Directive ED 26-01, directing federal agencies to inventory F5 BIG-IP products due to a nation-state cyber threat actor compromising F5 systems. Agencies must evaluate public internet accessibility, apply updates, and report their actions by October 29, 2025.

CISA has added a new vulnerability, CVE-2025-54253, to its Known Exploited Vulnerabilities Catalog based on active exploitation evidence.

CISA has issued thirteen advisories regarding Industrial Control Systems (ICS) on October 16, 2025, detailing various security vulnerabilities across multiple platforms, including products from Rockwell Automation, Siemens, Hitachi Energy, and Schneider Electric.

CISA has included five new vulnerabilities in its Known Exploited Vulnerabilities Catalog due to evidence of their active exploitation.