The US Department of Homeland Security has flagged the exploited SCADA XSS vulnerability; patching urgency is increasing.

The Cybersecurity and Infrastructure Security Agency (CISA), a sub-agency of the U.S. Department of Homeland Security, has added a four-year-old ScadaBR OpenPLC cross-site scripting vulnerability to its list of known exploited vulnerabilities. As this vulnerability is actively being exploited, CISA's actions serve as a reminder for operators to expedite the patching process - which in turn drives demand for cybersecurity vendors such as Palo Alto Networks.