Jacksonville CISA Reports on ICS/OT Vulnerability Trends for 2024-2025
Article Content
Browse articles 
In 2025, CISA published 508 ICS advisories, a 20% increase from the previous year. Despite this, only 1.32% of the 2,203 vulnerabilities rated High or Critical in 2024 and 2025 were confirmed as exploited. The percentage of vulnerabilities receiving official advisories dropped from 28.3% in 2024 to 17.5% in 2025.
Ask AI about this cluster
Answers cite the sources they use
Updated 212d ago How this analysis works
Timeline
2024-01-01
Start of the 2024 reporting period
2025-01-01
Start of the 2025 reporting period
2025-01-05
CVE-2025-1234 published
2025-12-31
CISA published 508 ICS advisories for 2025
Recent
Report on vulnerability confirmation rates released
More articles in this cluster (2)
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active… 
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…