ICS Advisory Project: Alerts & Summaries

ICS Advisory Project: Alerts & Summaries provides two streams of community intelligence on ICS/OT vulnerabilities.

ICS[AP] Alerts are issued for high-impact disclosures and provide practitioner-grade analysis layered on top of original vulnerability research. Each Alert adds critical infrastructure sector context, mitigation recommendations, a NERC CIP crosswalk where applicable, and detection content for asset owners and operators, and connects the disclosure to active CISA ICS Advisories. Alerts are issued as warranted, not on a fixed cadence.

ICS[AP] Summaries provide weekly summaries of new CISA ICS Advisories and other ICS security advisories released by CERTs and vendors not reported in a CISA ICS Advisory during that week, plus semi-annual and annual summaries for the year. The ICS[AP] provides this to increase the ICS/OT community awareness of these potential vulnerabilities disclosed by vendors that are and are not CVE Numbering Authorities (CNAs).