Review – 3 Advisories and 4 Updates Published – 6-9-26 – Part 2

On Tuesday, CISA’s NCCIC-ICS published three control system security advisories that I addressed on that day. Yesterday, CISA got around to sending out their email about the advisories and updates, so I can now describe the four updates that were published but otherwise hidden from view on Tuesday. 

Updates  

Schneider Update #1 - This update provides additional information on the Modicon M340 advisory that was originally published on September 11th, 2025. 

NOTE: I briefly mentioned the Schneider advisory on which this update was based on April 19th, 2026. 

Schneider Update #2 - This update provides additional information on the Modicon M340 advisory that was originally published on February 4th, 2025, and most recently updated on September 11th, 2025. 

NOTE: I briefly mentioned the Schneider advisory on which this update was based on April 19th, 2026. 

Schneider Update #3 - This update provides additional information on the Modicon M340 advisory that was originally published on November 21st, 2024. 

NOTE: I briefly mentioned the Schneider advisory on which this update was based on April 19th, 2026. 

Mitsubishi Update - This update provides additional information on the FA Engineering Software Products advisory that was originally published on May 14th, 2024, and most recently updated on January 15th, 2026. 

For more information on these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/3-advisories-and-4-updates-published-bd2 - subscription required.