Week of August 11, 2025: CISA ICS Advisory Surge and N-able, WinRAR Join KEV List

The week of August 11, 2025, saw CISA publish thirty-nine Industrial Control Systems advisories across two releases, add vulnerabilities in N-able N-central and WinRAR to its Known Exploited Vulnerabilities Catalog, and join the NSA, FBI, EPA, and five international partners on new guidance for operational technology asset inventories. Industry personnel moves also continued, with Cellebrite naming Thomas E. Hogan as CEO after months serving as interim leader.

CISA Releases 32 ICS Advisories Spanning Siemens and Rockwell Lines

CISA published thirty-two new Industrial Control Systems advisories on August 14, 2025, covering vulnerabilities across Siemens and Rockwell Automation product lines, including SIMATIC, SINEC, RUGGEDCOM, SIPROTEC, FactoryTalk, Studio 5000, and ControlLogix platforms. The advisories addressed issues ranging from engineering software to networking and protection equipment used across manufacturing and energy environments. CISA urged asset owners and operators to review the technical details and apply recommended mitigations, reinforcing the steady cadence of ICS-focused disclosures that CISOs overseeing operational technology needed to track through the middle of August. (CISA)

CISA Adds N-able N-central Flaws to Known Exploited Vulnerabilities Catalog

CISA added two vulnerabilities affecting N-able N-central to its Known Exploited Vulnerabilities Catalog on August 13, 2025, citing evidence of active exploitation. The entries, an insecure deserialization flaw tracked as CVE-2025-8875 and a command injection flaw tracked as CVE-2025-8876, applied to the remote monitoring and management platform used by managed service providers. Federal civilian agencies were required to remediate the two vulnerabilities under Binding Operational Directive 22-01, and CISA encouraged all organizations to prioritize the fixes given the risk such flaws pose to remote management infrastructure. (CISA)

CISA and International Partners Issue OT Asset Inventory Guidance

CISA joined the NSA, FBI, EPA, and cybersecurity agencies from Australia, Canada, Germany, the Netherlands, and New Zealand on August 13, 2025, to release joint guidance on building and maintaining operational technology asset inventories and taxonomies. Acting CISA Director Madhu Gottumukkala said that "OT systems are essential to the daily lives of all Americans," noting they power water systems, energy grids, manufacturing, and transportation networks. The guidance was intended to give critical infrastructure owners deeper visibility into OT assets as a first step toward reducing cybersecurity risk and improving incident response planning across all sectors. (CISA)

WinRAR and Decades-Old Microsoft Bugs Added to KEV Catalog

CISA added three vulnerabilities to its Known Exploited Vulnerabilities Catalog on August 12, 2025, based on evidence of active exploitation. The additions included a WinRAR path traversal flaw tracked as CVE-2025-8088 from RARLAB, alongside two long-standing Microsoft vulnerabilities, a 2013 Internet Explorer resource management flaw and a 2007 Excel remote code execution flaw. The mix of a current archiving-tool bug with decades-old Office and browser vulnerabilities underscored for CISOs that older, unpatched software could still be actively targeted alongside newly disclosed issues. (CISA)

Seven More ICS Advisories Cover Building Access, Power Monitoring, and Rail Systems

CISA issued seven Industrial Control Systems advisories on August 12, 2025, covering products from Johnson Controls, Schneider Electric, AVEVA, Ashlar-Vellum, MegaSys Computer Technologies, and Santesoft, along with an update to guidance on the End-of-Train and Head-of-Train Remote Linking Protocol used in rail operations. The advisories spanned building-access controllers, power-monitoring software, data historians, and medical-imaging PACS servers, illustrating the breadth of sectors CISOs needed to monitor for ICS patching that week, from physical security systems to industrial engineering and transportation protocols. (CISA)

Cellebrite Names Thomas E. Hogan Permanent CEO Amid Weekly Industry Moves

SecurityWeek's weekly roundup of executive moves, covering the week of August 11, 2025, reported several cybersecurity leadership changes. Israeli forensic investigation vendor Cellebrite named Thomas E. Hogan as Chief Executive Officer effective immediately, after he had served as interim CEO since January 2025. The same roundup noted new sales, marketing, and revenue leadership hires at Axonius, HITRUST, QuSecure, OX, Outpost24, and Cato Networks, reflecting continued churn in vendor leadership ranks that security buyers often track alongside their own staffing decisions. (SecurityWeek)