The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published an alert, urging organizations and vendors to patch critical vulnerabilities within their industrial control systems (ICS). The vulnerabilities impact implementations of the Object Management Group (OMG) Data-Distribution Service (DDS), and if exploited could allow unauthenticated attackers to create stack and heat-based buffer-overflow conditions that could lead to denial-of-service (DoS), and remote code execution (RCE). As of this time, the majority of the products have been patched by most of the affected vendors. However, some are still vulnerable to attack, and if organizations haven’t received information about their vendor’s patch, they are urged to contact them directly. Organizations have been ordered to update their affected ICSs to the latest stable secure versions, as well as isolate or airgap their vulnerable ICS behind firewalls and VPNs. ICS are considered business-critical, and in many cases cannot be immediately patched or they risk detriment to their operations. This urgent and fast alert reflects the Biden administration’s focus on enhancing critical infrastructure security readiness, and to mitigate threats before they have the ability to compromise targets. The Ankura CTAPT will continue to provide the latest information about ICS compromises and threats to our readers.