Live feed
CISA ICS advisories
Every advisory CISA publishes for industrial control systems, medical devices and industrial software, filtered by the things that decide whether it matters to you: the vendor in your plant, the protocol on your wire and the sector you operate in.
Advisories in feed
—
CISA publishes the most recent advisories here; the archive lives on cisa.gov
Matching your filters
0
Vendor, protocol and sector filters combine
Last retrieved
—
Cached server-side for 30 minutes
Loading the CISA ICS advisory feed…
Using the feed
Turning an advisory into an action
An ICS advisory is not a patch instruction. Most industrial fixes need an outage window, a vendor-qualified firmware build and a validated fallback to manual operation.
Why should I care?
Filter to your vendors first and keep that view as your standing watch list. An advisory for equipment you do not own is background noise; an advisory for a controller sitting on a routable path from the enterprise network is an incident waiting for a date.
Triage order
- Do we own the exact product and firmware band named in the advisory?
- Is it reachable from anywhere other than the local control network?
- Does exploitation cause loss of control, loss of view or a safety consequence?
- Is there a compensating control — conduit rule, read-only path, protocol filter — that we can apply this week?
- Only then: schedule the vendor-qualified firmware at the next outage window