2023 ICS Advisory Report

A key challenge industrial organizations face is the flood of new ICS vulnerabilities released each year. They are often overwhelmed by the scale of these emerging risks.

To provide insight into the growing ICS risks and vulnerabilities landscape, Verve analyzed publicly available data points and reviewed our own vulnerability analysis data from the past couple of years. In this research, we:

• Examined the 371 ICS-CERT advisories from 2023 and extracted key insights,
• Compared all advisories from 2023 with the ones from past years (with a particular focus on 2022),
• Assessed the potential implications of those advisories,
• Identified a few key advisories that stand out from the pack, and
• Developed a list of recommendations for ICS staff based on our observations.

The goal of this analysis is to bring clarity to the overwhelming amount of alerts by providing visibility into the types of threats and recommend actions to address these risks in sensitive OT environments.