The FBI released a flash report stating indicators of compromise (IOCs) linked with BlackCat/ALPHV, which is a ransomware-as-a-service that has compromised at least 60 entities worldwide.

Sources: FBI flash report, CISA

Cisco released security updates for multiple products due to vulnerabilities found that could allow an attacker to gain control of affected systems.

Sources: Cisco, CISA

Drupal released security updates due to vulnerabilities found in certain versions that could allow an attacker to gain control of affected systems.

Sources: Drupal, CISA, Drupal

There are multiple vulnerabilities that have been found in Hitachi Energy's MicroSCADA Pro/X SYS600, such as observable discrepancy, HTTP request smuggling, classic buffer overflow and more.

Sources: Hitachi, CISA

Johnson Controls' Metasys contains a server-side request forgery vulnerability.

Sources: Johnson Controls, CISA

Delta Electronics' ASDA-Soft contains out-of-bounds write and out-of-bounds read vulnerabilities.

Sources: Delta Electronics, CISA

Cybersecurity authorities of the U.S., Australia, Canada, New Zealand and the U.K. released a joint cybersecurity advisory to caution organizations that Russia's invasion of Ukraine could increase malicious cyber activity.

Sources: CISA alert (AA22-110A), CISA

CISA added three vulnerabilities to its Known Exploited Vulnerabilities Catalog.

Sources: CISA

Oracle released a Critical Patch update for multiple products that addresses 520 vulnerabilities.

Sources: Oracle, CISA

Elcomplus' SmartPPT SCADA server contains multiple vulnerabilities, such as cross-site scripting, unauthorized exposure to sensitive information, path traversal and more.

Sources: Elcomplus support, CISA

The FANUC ROBOGUIDE contains multiple vulnerabilities, such as incorrect permission assignment for critical resource, improper access control, path traversal and more.

Sources: FANUC, CISA

The Automated Logic WebCtrl server contains an open redirect vulnerability.

Sources: Automated Logic, CISA

The Interlogix Hills ComNav contains improper restriction of excessive authentication attempts and inadequate encryption strength vulnerabilties.

Sources: Carrier Global Corporation, CISA

CISA, the FBI and the U.S. Treasury Department released a joint cybersecurity advisory (CSA) reporting on the North Korean state-sponsored APT actor, the Lazarus Group.

Sources: CISA CSA, CISA