Latest CISA ICS Alerts: Exploits & Vulnerability News

CISA published updates on February 18, 2025 clarifying multiple high-severity vulnerabilities affecting ICS/HMI software (Delta CNCSoft-G2 with several memory-corruption flaws enabling potential remote code execution) and Rockwell GuardLogix 5380/5580 (an exceptional-condition handling flaw leading to DoS), and added two critical authentication-bypass vulnerabilities (Palo Alto PAN-OS CVE-2025-0108 and SonicWall SonicOS SSLVPN CVE-2024-53704) to its Known Exploited Vulnerabilities catalog; vendors and CISA recommend immediate patching, version upgrades, access restrictions, and standard hardening measures.