Signal

Rockwell Automation has reported a vulnerability in its Verve Asset Manager affecting multiple versions, allowing unauthorized access via the API. Affected users are urged to update to versions 1.41.4 or 1.42. The vulnerability, identified as CVE-2025-11862, has a CVSS v4 score of 8.4.

Brightpick AI's warehouse automation platform is vulnerable to multiple security issues, allowing unauthorized access to critical functions and sensitive data. CISA recommends mitigations, but Brightpick has not engaged in collaborative response efforts. Users are encouraged to secure their systems against these vulnerabilities.

CISA will cease updating ICS security advisories for Siemens vulnerabilities as of January 10, 2023. Siemens advises updating Spectrum Power 4 to V4.70 SP12 Update 2. Several serious vulnerabilities have been identified, allowing remote code execution and privilege escalation, requiring immediate attention.

As of January 10, 2023, CISA stopped updating ICS advisories for Siemens vulnerabilities. A risk in Solid Edge allows remote attacks.

CISA, in collaboration with federal and international partners, has issued an updated Cybersecurity Advisory on Akira ransomware, detailing latest attack methods and prevention strategies.

Rockwell Automation has identified multiple vulnerabilities in the FactoryTalk DataMosaix Private Cloud, urging users to update to secure versions.