Looking Back – 8-3-25 – Public ICS Disclosures

Nearly every morning I start my computer time by looking at information from Google about what happened in my blog in the previous 24 hours. Google, and blogspot.com is a Google service, provides interesting pieces of analytical data about my blog readership. One item of particular interest is the top ten blog posts each day. As you would expect, most of those posts were from the last couple of days, but with 16 years of publishing this blog, every once-in-a-while, a blog post from ancient history rises into that list. 

Today a blog post from August 2025 made the list; not as long ago as normal, but interesting nonetheless. There used to be a series of posts I did every weekend where I would post about new advisories from control system related vendors that had not been covered by CISA that week. They started as short posts, frequently only two or three advisories each week. But as my list of vendors and then researchers (as I added researcher reports on ICS vulnerabilities) continued to grow, so did the number of weekly advisories included in the post. That growth frequently required two or three posts per week.  

I stopped making these posts due to the amount of time it consumed every weekend. It was a lot of work, and too much time away from the family. With no reader feedback, either on the posts or their stoppage, I think that this was probably a good decision. 

But this last weekend, I used my list of vendor websites to compile the list of PHP2Shell advisories published, and I realized how many advisories I had missed since I stopped making these posts. So, I am reconsidering that decision. I do not think that I would be covering as many vendors and researchers, over 200 vendor websites on my current list. Still thinking about how I would select the vendors and researchers that would be covered by the weekly post.