| Date | Source | Type | Title | Author |
|---|---|---|---|---|
| Aug 28, 2025 | CISA | Alert | CISA Releases Nine Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-240-01 Mitsubishi Electric MELSEC iQ-F Series CPU Module ICSA-25-240-02 Mitsubishi Electric MELSEC iQ-F Series CPU Module ICSA-25-240-03 Schneider Electric Saitel DR & Saitel DP Remote Terminal Unit ICSA-25-240-04 Delta Electronics CNCSoft-G2 ICSA-25-240-05 Delta Electronics COMMGR ICSA-25-240-06 GE Vernova CIMPLICITY… | CISA |
| Aug 28, 2025 | CISA | ICS Advisory | ICSA-25-240-03: Schneider Electric Saitel DR & Saitel DP Remote Terminal Unit Schneider Electric is aware of a vulnerability in its Saitel DR & Saitel DP RTU (Remote Terminal Unit) products. The Saitel DR RTU is a field device, offering a solid and powerful platform for data acquisition, communication, automation and IED integration for distribution and transmission networks, generation sector and railway. The Saitel DP RTU is a modular platform for medium voltage and low voltage public distribution and transmission network management. | CISA |
| Aug 28, 2025 | CISA | ICS Advisory | ICSA-25-240-01: Mitsubishi Electric MELSEC iQ-F Series CPU Module Successful exploitation of this vulnerability could allow an attacker to read or write the device values of the product. In addition, the attacker may be able to stop the operation of the programs. | CISA |
| Aug 28, 2025 | CISA | ICS Advisory | ICSA-25-240-02: Mitsubishi Electric MELSEC iQ-F Series CPU Module Successful exploitation of this vulnerability could allow an attacker the ability to obtain credential information by intercepting SLMP communication messages, and read or write the device values of the product by using the obtained credential information. In addition, the attacker may be able to stop the operations of programs. | CISA |
| Aug 28, 2025 | CISA | ICS Advisory | ICSA-25-240-04: Delta Electronics CNCSoft-G2 Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on affected installations of the device. | CISA |
| Aug 28, 2025 | CISA | ICS Advisory | ICSA-25-240-05: Delta Electronics COMMGR Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code. | CISA |
| Aug 28, 2025 | CISA | ICS Advisory | ICSA-25-240-06: GE Vernova CIMPLICITY Successful exploitation of this vulnerability could allow a low-privileged local attacker to escalate privileges. | CISA |
| Aug 27, 2025 | NSA | Advisory | Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System Executive summary People’s Republic of China (PRC) state-sponsored cyber threat actors are targeting networks globally, including, but not limited to, telecommunications, government, transportation, lodging, and military infrastructure networks. | AISE, AISI, AIVD, ASD/ACSC, AW, BSI, CCCS, CISA, CNI, DC3, FBI, MIVD, NCO, NCSC-NZ, NCSC-UK, NSA, NUKIB, SKW, SUPO |
| Aug 27, 2025 | NSA | Alert | CISA and Partners Release Joint Advisory on Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage Systems CISA, along with the National Security Agency, Federal Bureau of Investigation, and international partners, released a joint Cybersecurity Advisory on People’s Republic of China (PRC) state-sponsored Advanced Persistent Threat (APT) actors targeting critical infrastructure across sectors and continents to maintain persistent, long-term access to networks. | CISA, FBI, NSA |
| Aug 27, 2025 | CISA | Vulnerability Advisory | VA-25-239-01: Agiloft multiple vulnerabilities Agiloft is a web-based contract management platform. Multiple vulnerabilities were found in Agiloft that could allow an attacker to gain administrative access to Agiloft, execute operating system commands, or modify update packages. | CISA |
| Aug 27, 2025 | NSA | Alert | Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System While these actors focus on large backbone routers of major telecommunications providers, as well as provider edge (PE) and customer edge (CE) routers, they also leverage compromised devices and trusted connections to pivot into other networks. These actors often modify routers to maintain persistent, long-term access to networks. | AISE, AISI, AIVD, ASD/ACSC, AW, BSI, CCCS, CISA, CNI, DC3, FBI, MIVD, NCO, NCSC-NZ, NCSC-UK, NSA, NUKIB, SKW, SUPO |
| Aug 27, 2025 | NSA | Advisory | CSA: Countering China State Actors Compromise of Networks While these actors focus on large backbone routers of major telecommunications providers, as well as provider edge (PE) and customer edge (CE) routers, they also leverage compromised devices and trusted connections to pivot into other networks. These actors often modify routers to maintain persistent, long-term access to networks. | AISE, AISI, AIVD, ASD/ACSC, AW, BSI, CCCS, CISA, CNI, DC3, FBI, MIVD, NCO, NCSC-NZ, NCSC-UK, NSA, NUKIB, SKW, SUPO |
| Aug 26, 2025 | CISA | Alert | CISA Releases Three Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-238-01 INVT VT-Designer and HMITool ICSA-25-238-03 Schneider Electric Modicon M340 Controller and Communication Modules ICSA-25-140-03 Danfoss AK-SM 8xxA Series (Update A) This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Aug 26, 2025 | CISA | ICS Advisory | ICSA-25-238-01: INVT VT-Designer and HMITool Successful exploitation of these vulnerabilities could allow attackers to execute arbitrary code in the context of the current process. | CISA |
| Aug 26, 2025 | CERT-EU | Advisory | 2025-033: Critical Vulnerabilities in Citrix NetScaler Products Citrix warns that exploits of the critical vulnerability, CVE-2025-7775, have been observed on unmitigated It is recommended to update affected assets as soon as possible. The vulnerability CVE-2025-7775, with a CVSS score of 9.2, is due to improper restriction of operations within the bounds of a memory buffer, leading to Remote Code Execution (RCE) and/or Denial of Service [1]. | CERT-EU |
| Aug 26, 2025 | CISA | ICS Advisory | ICSA-25-238-03: Schneider Electric Modicon M340 Controller and Communication Modules (Update A) Schneider Electric is aware of a vulnerability in its Modicon M340 https://www.se.com/ww/en/product-range/1468-modicon-m340-pac/, BMXNOR0200H https://www.se.com/us/en/product/BMXNOR0200H/communication-module-modicon-m340-iec-608705101-104-dnp3-for-severe-environments/: Modicon M340 X80 Ethernet Communication Modules, BMXNGD0100 https://www.se.com/us/en/product/BMXNGD0100/communication-module-modicon-m580-global-data-service/: M580 Global Data module, BMXNOC0401… | CISA |
| Aug 22, 2025 | CISA | Alert | CISA Requests Public Comment for Updated Guidance on Software Bill of Materials These updates build on the 2021 version of the National Telecommunications and Information Administration SBOM Minimum Elements to reflect advancements in tooling and implementation. An SBOM serves as a vital inventory of software components, enabling organizations to identify vulnerabilities, manage dependencies, and mitigate risks. | CISA |
| Aug 21, 2025 | CISA | Alert | CISA Releases Three Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-233-01 Mitsubishi Electric Corporation MELSEC iQ-F Series CPU Module ICSA-25-177-01 Mitsubishi Electric Air Conditioning Systems (Update A) ICSMA-25-233-01 FUJIFILM Healthcare Americas Synapse Mobility This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Aug 21, 2025 | CISA | ICS Medical Advisory | ICSMA-25-233-01: FUJIFILM Healthcare Americas Synapse Mobility Successful exploitation of this vulnerability could allow an attacker to access information beyond their assigned roles. | CISA |
| Aug 21, 2025 | CISA | ICS Advisory | ICSA-25-233-01: Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module (Update A) Successful exploitation of this vulnerability could result in a remote attacker being able to delay the processing of the Web server function and prevent legitimate users from utilizing the Web server function by sending a specially crafted HTTP request. | CISA |
| Aug 20, 2025 | FBI | Alert | Russian Government Cyber Actors Targeting Networking Devices, Critical Infrastructure The Federal Bureau of Investigation (FBI) is warning the public, private sector, and international community of the threat posed to computer networks and critical infrastructure by cyber actors attributed to the Russian Federal Security Service's (FSB) Center 16. | FBI |
| Aug 19, 2025 | CISA | Alert | CISA Releases Four Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-231-01 Siemens Desigo CC Product Family and SENTRON Powermanager ICSA-25-231-02 Siemens Mendix SAML Module ICSA-25-217-02 Tigo Energy Cloud Connect Advanced (Update A) ICSA-25-219-07 EG4 Electronics EG4 Inverters (Update A) This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Aug 19, 2025 | CISA | ICS Advisory | ICSA-25-231-01: Siemens Desigo CC Product Family and SENTRON Powermanager Versions V5.0 through V8 of the Desigo CC product family (Desigo CC, Desigo CC Compact, Desigo CC Connect, Cerberus DMS), as well as the Desigo CC-based SENTRON Powermanager, are affected by a vulnerability in the underlying third-party component WIBU Systems CodeMeter Runtime. Successful exploitation of this vulnerability could allow privilege escalation. Siemens has released instructions how to update the CodeMeter Runtime component and recommends to apply the update on affected systems. | CISA |
| Aug 19, 2025 | CISA | ICS Advisory | ICSA-25-231-02: Siemens Mendix SAML Module Versions V5.0 through V8 of the Desigo CC product family (Desigo CC, Desigo CC Compact, Desigo CC Connect, Cerberus DMS), as well as the Desigo CC-based SENTRON Powermanager, are affected by a vulnerability in the underlying third-party component WIBU Systems CodeMeter Runtime. Successful exploitation of this vulnerability could allow privilege escalation. Siemens has released instructions how to update the CodeMeter Runtime component and recommends to apply the update on affected systems. | CISA |
| Aug 18, 2025 | CERT-EU | Advisory | 2025-032: Multiple Vulnerabilities in Microsoft Products OnAugust13,2025,MicrosoftreleaseditsAugust2025PatchTuesdayadvisoryaddressing111 security flows in various products among which 16 are rated as critical [1]. It is recommended updating as soon as possible, prioritising public facing and critical assets. Below are listed the notable vulnerabilities among those rated as critical by Microsoft: The vulnerability CVE-2025-50176, with a CVSS score of 7. | CERT-EU |
| Aug 18, 2025 | JPCERT/CC | Alert | [Updated]Alert Regarding Multiple OS Command Injection Vulnerabilities in Trend Micro Multiple Endpoint Security Products for Enterprises On August 6, 2025, Trend Micro has released the information regarding vulnerabilities (CVE-2025-54948, CVE-2025-54987) in the management console of multiple endpoint security products for enterprises. If these vulnerabilities are exploited, an unauthenticated attacker may execute arbitrary code. Trend Micro Incorporated has reported that attacks exploiting CVE-2025-54948 have been observed in the wild. | JPCERT/CC |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-26: Rockwell Automation FLEX 5000 I/O (Update A) Successful exploitation of these vulnerabilities could create a denial-of-service condition. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-22: Siemens Web Installer The installers used to install several Siemens products are affected by a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected installer component. This vulnerability poses a risk only during setup and installation phase of the affected applications downloaded e.g. via OSD (Online Software Delivery). Siemens has released new versions for several affected products and recommends using the latest versions during setup and installation. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-05: Siemens IAM Client WIBU Systems published information about a privilege escalation vulnerability under a certain circumstances and associated fix releases of CodeMeter Runtime, a product provided by WIBU Systems and used in several Siemens industrial products. Siemens has released new versions for the affected products and recommends to update to the latest versions. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-03: Siemens Engineering Platforms Affected products do not properly restrict access permissions to a local Windows Named Pipe and do not properly sanitize user-controllable input sent to that Named Pipe. This could allow a local authenticated attacker to cause a type confusion and execute arbitrary code within the affected application and its privileges. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available. | CISA |
| Aug 14, 2025 | CISA | Alert | CISA Releases Thirty-Two Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-226-01 Siemens SIMATIC RTLS Locating Manager ICSA-25-226-03 Siemens Engineering Platforms ICSA-25-226-04 Siemens Simcenter Femap ICSA-25-226-05 Siemens Wibu CodeMeter Runtime ICSA-25-226-06 Siemens Opcenter Quality ICSA-25-226-07 Siemens Third-Party Components in SINEC OS ICSA-25-226-08 Siemens RUGGEDCOM CROSSBOW Stati… | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-01: Siemens SIMATIC RTLS Locating Manager Siemens has released a new version for SIMATIC RTLS Locating Manager and recommends to update to the latest version. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-18: Siemens SIMOTION SCOUT, SIMOTION SCOUT TIA, and SINAMICS STARTER SIMOTION SCOUT, SIMOTION SCOUT TIA and SINAMICS STARTER are affected by an XXE injection vulnerability that could allow an attacker to access arbitrary application files. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-02: Siemens COMOS COMOS before V10.6 is affected by a local arbitrary code execution vulnerability in the integrated Open Design Alliance Drawings SDK. Siemens has released a new version for COMOS and recommends to update to the latest version. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-04: Siemens Simcenter Femap Simcenter Femap contains a file parsing vulnerability that could be triggered when the application reads files in STP or BMP file format. If a user is tricked to open a malicious file with the affected application, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released new versions for the affected products and recommends to update to the latest versions. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-15: Siemens SINEC OS SINEC OS before V3.1 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-07: Siemens Third-Party Components in SINEC OS SINEC OS before V3.2 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-09: Siemens RUGGEDCOM APE1808 Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-06: Siemens Opcenter Quality The Opcenter Quality is affected by multiple vulnerabilities in the SmartClient modules Opcenter QL Home (SC), SOA Audit and SOA Cockpit. Siemens has released new versions for the affected products and recommends to update to the latest versions. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-11: Siemens SIMATIC S7-PLCSIM Affected products do not properly sanitize user-controllable input when parsing project files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-08: Siemens RUGGEDCOM CROSSBOW Station Access Controller RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code or to create a denial of service condition. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-10: Siemens SIPROTEC 5 Affected SIPROTEC 5 devices do not properly limit the bandwidth for incoming network packets over their local USB port. This could allow an attacker with physical access to send specially crafted packets with high bandwidth to the affected devices thus forcing them to exhaust their memory and stop responding to any network traffic via the local USB port. Affected devices reset themselves automatically after a successful attack and the protection function is not affected of this vulnerability. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-31: Rockwell Automation 1756-EN4TR, 1756-EN4TRXT (Update B) Successful exploitation of these vulnerabilities could result in an attacker causing a denial of service condition. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-12: Siemens SIPROTEC 4 and SIPROTEC 4 Compact SIPROTEC 4 and SIPROTEC 4 Compact devices contain a vulnerability that could allow an unauthenticated remote attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-13: Siemens SIMATIC RTLS Locating Manager SIMATIC RTLS Locating Manager Before V3.2 contains an improper input validation vulnerability that could allow an authenticated remote attacker to execute arbitrary code with high privileges. Siemens has released a new version for SIMATIC RTLS Locating Manager and recommends to update to the latest version. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-14: Siemens RUGGEDCOM ROX II RUGGEDCOM ROX II devices does not properly enforce limitations on type and size of files that can be uploaded through their web interface. This could allow an attacker with a legitimate, highly privileged account on the web interface to upload arbitrary files onto the filesystem of the devices. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-16: Siemens SICAM Q100/Q200 SICAM Q100 and Q200 devices are affected by two information disclosure vulnerabilities that could allow an authenticated local attacker to extract the SMTP account password and use the configured SMTP service for arbitrary purposes. Siemens has released new versions for the affected products and recommends to update to the latest versions. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-17: Siemens SINEC Traffic Analyzer SINEC Traffic Analyzer before V3.0 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC Traffic Analyzer and recommends to update to the latest version. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-19: Siemens SINUMERIK Siemens SINUMERIK Controllers are affected by an improper VNC password check vulnerability. Siemens has released new versions for the affected products and recommends to update to the latest versions. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-20: Siemens RUGGEDCOM ROX II RUGGEDCOM ROX II devices do not properly limit access through their Built-In-Self-Test (BIST) mode. This could allow a local attacker to bypass authentication and access a root shell on the device. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-21: Siemens BFCClient Siemens BFCClient contains multiple vulnerabilities in the integrated OpenSSL component that could allow an attacker to read memory contents, to change the application behaviour or to create a denial of service condition. Siemens has released a new version for BFCClient and recommends to update to the latest version. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-23: Rockwell Automation FactoryTalk Viewpoint Successful exploitation of this vulnerability could result in full privilege escalation. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-24: Rockwell FactoryTalk Linx Successful exploitation of this vulnerability could allow an attacker to to create, update, and delete FTLinx drivers. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-25: Rockwell Automation Micro800 Successful exploitation of these vulnerabilities could result in remote code execution or may lead to privilege escalation. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-30: Rockwell Automation FactoryTalk Action Manager Successful exploitation of this vulnerability could allow a local unauthenticated attacker to listen to communications and manipulate the device. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-29: Rockwell Automation Studio 5000 Logix Designer Successful exploitation of this vulnerability could allow an attacker to crash the device or execute malicious code. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-28: Rockwell Automation ControlLogix Ethernet Modules Successful exploitation of this vulnerability could allow remote attackers to perform memory dumps, modify memory, and control execution flow. | CISA |
| Aug 14, 2025 | CISA | ICS Advisory | ICSA-25-226-27: Rockwell Automation ArmorBlock 5000 I/O - Webserver Successful exploitation of these vulnerabilities could allow an attacker to predict session numbers or perform privileged actions. | CISA |
| Aug 13, 2025 | CISA | Alert | CISA and Partners Release Asset Inventory Guidance for Operational Technology Owners and Operators CISA, along with the National Security Agency, the Federal Bureau of Investigation, Environmental Protection Agency, and several international partners, released comprehensive guidance to help operational technology (OT) owners and operators across all critical infrastructure sectors create and maintain OT asset inventories and supplemental taxonomies. | CISA, EPA, FBI, NSA |
| Aug 13, 2025 | FBI | Alert | Fictitious Law Firms Targeting Cryptocurrency Scam Victims Combine Multiple Exploitation Tactics While Offering to Recover Funds This scheme combines a number of exploitation tactics including targeting vulnerable populations, particularly the elderly; exploiting victims' emotional state and financial need to recover funds from a previous scam; and giving victims the sense of safety and security by impersonating or falsely affiliating themselves with multiple government entities. | FBI |
| Aug 13, 2025 | FBI | Guidance | Foundations for OT Cybersecurity: Asset Inventory Guidance for Owners and Operators Using these tools helps owners and operators identify which assets in their environment should be secured and protected, and structure their defenses accordingly to reduce the risk a cybersecurity incident poses to the organization’s mission and service continuity. An asset inventory is an organized, regularly updated list of an organization’s systems, hardware, and software. | ASD/ACSC, BSI, CCCS, CISA, DOE, EPA, FBI, NCSC-NL, NCSC-NZ, NSA |
| Aug 13, 2025 | JPCERT/CC | Alert | Microsoft Releases August 2025 Security Updates Microsoft has released August 2025 Security Updates to address the vulnerabilities in their products. Remote attackers leveraging these vulnerabilities may be able to execute arbitrary code. It is recommended to check the information provided by Microsoft and apply the updates. | JPCERT/CC |
| Aug 13, 2025 | CERT-EU | Advisory | 2025-029: Possible Zero-Day Vulnerability in SonicWall Products A remote attacker could exploit this vulnerability to execute arbitrary code on the affected appliance. It is recommended to disable SSLVPN Services as soon as possible. | CERT-EU |
| Aug 12, 2025 | CISA | Alert | CISA Releases Seven Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-224-01 Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share ICSA-25-224-02 Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 ICSA-25-224-03 Schneider Electric EcoStruxure Power Monitoring Expert ICSA-25-224-04 AVEVA PI Integrator ICSA-24-263-04 MegaSys Computer Technolo… | CISA |
| Aug 12, 2025 | CISA | ICS Medical Advisory | ICSMA-25-224-01: Santesoft Sante PACS Server Successful exploitation of these vulnerabilities could allow an attacker to create arbitrary files, cause a denial-of-service condition, obtain sensitive information, and steal a user's cookie information. | CISA |
| Aug 12, 2025 | CISA | ICS Advisory | ICSA-25-224-04: AVEVA PI Integrator Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, or upload and execute files. | CISA |
| Aug 12, 2025 | CISA | ICS Advisory | ICSA-25-224-01: Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code. | CISA |
| Aug 12, 2025 | CISA | ICS Advisory | ICSA-25-224-03: Schneider Electric EcoStruxure Power Monitoring Expert Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Power Monitoring Expert (PME) and EcoStruxure Power Operation (EPO) and EcoStruxure Power SCADA Operation (PSO) products. EcoStruxure Power Monitoring Expert (PME) is an on-premises software used to help power critical and energy-intensive facilities maximize uptime and operational efficiency. Note: There are some instances of PME being deployed in a Managed Service model. | CISA |
| Aug 12, 2025 | CISA | ICS Advisory | ICSA-25-224-02: Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 (Update A) Successful exploitation of these vulnerabilities may allow an attacker to modify firmware and access the space that is protected by the device. | CISA |
| Aug 8, 2025 | CERT-EU | Advisory | 2025-030: High Severity Vulnerability in Microsoft Exchange The vulnerability tracked as CVE-2025-53786 allows an attacker with administrative access to an on-premises Exchange Server to escalate privileges into the connected Exchange Online environment. The vulnerability can impact the confidentiality, integrity, and availability of affected systems. | CERT-EU |
| Aug 7, 2025 | CISA | Alert | CISA Issues ED 25-02: Mitigate Microsoft Exchange Vulnerability ED 25-02 directs all Federal Civilian Executive Branch (FCEB) agencies with Microsoft Exchange hybrid environments to implement required mitigations by 9:00 AM EDT on Monday, August 11, 2025 . This vulnerability presents significant risk to all organizations operating Microsoft Exchange hybrid-joined configurations that have not yet implemented the April 2025 patch guidance. | CISA |
| Aug 7, 2025 | CISA | Alert | CISA Releases Ten Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-219-01 Delta Electronics DIAView ICSA-25-219-02 Johnson Controls FX80 and FX90 ICSA-25-219-03 Burk Technology ARC Solo ICSA-25-219-04 Rockwell Automation Arena ICSA-25-219-05 Packet Power EMX and EG ICSA-25-219-06 Dreame Technology iOS and Android Mobile Applications ICSA-25-219-07 EG4 Electronics EG4 Inverters ICSA-25… | CISA |
| Aug 7, 2025 | CISA | ICS Advisory | ICSA-25-219-07: EG4 Electronics EG4 Inverters (Update B) Successful exploitation of these vulnerabilities could allow an attacker to intercept and manipulate critical data, install malicious firmware, hijack device access, and gain unauthorized control over the system. | CISA |
| Aug 7, 2025 | CISA | ICS Advisory | ICSA-25-219-02: Johnson Controls FX Server, FX80 and FX90 (Update A) Successful exploitation of this vulnerability could allow an attacker to compromise the device's configuration files. | CISA |
| Aug 7, 2025 | CISA | ICS Advisory | ICSA-25-219-06: Dreame Technology iOS and Android Mobile Applications (Update A) Successful exploitation of this vulnerability could result in unauthorized information disclosure. | CISA |
| Aug 7, 2025 | CISA | ICS Advisory | ICSA-25-219-08: Yealink IP Phones and RPS (Redirect and Provisioning Service) Successful exploitation of these vulnerabilities could result in an information disclosure. | CISA |
| Aug 7, 2025 | CISA | ICS Advisory | ICSA-25-219-05: Packet Power EMX and EG Successful exploitation of this vulnerability could allow an attacker to gain full access to the device without authentication. | CISA |
| Aug 7, 2025 | CISA | ICS Advisory | ICSA-25-219-04: Rockwell Automation Arena Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code. | CISA |
| Aug 7, 2025 | CISA | ICS Advisory | ICSA-25-219-03: Burk Technology ARC Solo Successful exploitation of this vulnerability could result in an attacker gaining access to the device, locking out authorized users, or disrupting operations. | CISA |
| Aug 7, 2025 | CISA | ICS Advisory | ICSA-25-219-01: Delta Electronics DIAView Successful exploitation of this vulnerability may allow a remote attacker to read or write files on the affected device. | CISA |
| Aug 7, 2025 | CISA | Vulnerability Advisory | VA-25-219-01: Tyler Technologies ERP Pro 9 Tyler Technologies ERP Pro 9 SaaS allows an authenticated user to escape the application and execute limited operating system commands. | CISA |
| Aug 6, 2025 | CISA | Alert | Microsoft Releases Guidance on High-Severity Vulnerability (CVE-2025-53786) in Hybrid Exchange Deployments CISA is aware of the newly disclosed high-severity vulnerability, CVE-2025-53786 , that allows a cyber threat actor with administrative access to an on-premise Microsoft Exchange server to escalate privileges by exploiting vulnerable hybrid-joined configurations. This vulnerability, if not addressed, could impact the identity integrity of an organization’s Exchange Online service. | CISA |
| Aug 6, 2025 | CISA | Analysis Report | CISA Releases Malware Analysis Report Associated with Microsoft SharePoint Vulnerabilities CISA released a Malware Analysis Report (MAR) on malware associated with exploitation of Microsoft SharePoint vulnerabilities, including SIGMA detection rules to help defenders identify related malicious activity in their environments. | CISA |
| Aug 6, 2025 | CISA | Analysis Report | MAR-251132.c1.v1 Exploitation of SharePoint Vulnerabilities This Malware Analysis Report (MAR-251132) details malware artifacts and indicators of compromise tied to exploitation of Microsoft SharePoint vulnerabilities, providing STIX-formatted IOCs and file hashes for threat hunting. | CISA |
| Aug 5, 2025 | CISA | ICS Advisory | ICSA-25-217-02: Tigo Energy Cloud Connect Advanced (Update A) Successful exploitation of these vulnerabilities could allow attackers to gain unauthorized administrative access using hard-coded credentials, escalate privileges to take full control of the device, modify system settings, disrupt solar energy production, interfere with safety mechanisms, execute arbitrary commands via command injection, cause service disruptions, expose sensitive data, and recreate valid session IDs to access sensitive device functions on connected solar inverter systems due to insecure session ID generation. | CISA |
| Aug 5, 2025 | CISA | Alert | CISA Releases Two Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-217-01 Mitsubishi Electric Iconics Digital Solutions Multiple Products ICSA-25-217-02 Tigo Energy Cloud Connect Advanced This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Aug 5, 2025 | CISA | ICS Advisory | ICSA-25-217-01: Mitsubishi Electric Iconics Digital Solutions Multiple Products (Update B) Successful exploitation of this vulnerability could allow a local attacker to make an unauthorized write to arbitrary files, by creating a symbolic link from a file used as a write destination by the processes of the affected products to a target file. This could allow the attacker to destroy the file on a PC with the affected products installed, resulting in a denial-of-service (DoS) condition on the PC if the destroyed file is necessary for the operation of the PC. | CISA |