Patrick Coyle @Pjcoyle@qoto.org

I posted the following to a tweet on X (https://x.com/CISACyber/status/1907150928634867730) from CISA announcing Apache Tomcat KEV listing: “While not strictly speaking a control system vulnerability, this is likely to show up in control systems as a third-party vulnerability. When reported by vendors, most will not identify as KEV issue.”

Short Takes – 4-1-25 – OT DFIR – Fram2 Launch – Starship 7 investigation – WMD detection systems – Fram2 mushrooms - https://tinyurl.com/mr2t29ap

I posted the following comment about reaction to Luna’s X post about another discharge petition: “Luna did not put this in the Rule, it was done at the behest of Speaker Johnson trying to evade the will of the majority of the members of the House. The Republicans complain about minority rule but tried to execute it today.”

Rule Rejected in House – Luna’s Proxy Bill Saved – The rule for considering three bills this week would also have killed Rep Luna’s resolution to allow members with new babies to vote by proxy – https://tinyurl.com/2vxcuesj #Legislation

Review – 1 Advisory and 1 Update Published – 4-1-25 – NCCIC-ICS control system security advisory for products from Rockwell Automation – Updated advisory for products from Hitachi Energy – Short version – https://tinyurl.com/2m756ssz #icsSecurity

1 Advisory and 1 Update Published – 4-1-25 – NCCIC-ICS control system security advisory for products from Rockwell Automation – Updated advisory for products from Hitachi Energy – DTRH look at Veeam vulnerabilities – https://tinyurl.com/mt2zx4u6 Subscription required #icsSecurity

Review – Bills Introduced – 3-31-25 (House) – 67 bills – HR 2482: NTIA reauthorization – HR 2508: encryption protection – HR 2515: rail hazmat telematics – https://tinyurl.com/mvbbn8xy #Legislation

Bills Introduced – 3-31-25 (House) – 67 bills – HR 2482: NTIA reauthorization – HR 2508: encryption protection – HR 2515: rail hazmat telematics – MIPS HR 2500: maritime liability – https://tinyurl.com/bp5v3a3k Subscription required #Legislation

CFSN Detailed Analysis - Substack Daily Update – 3-31-25 – Free Content – https://tinyurl.com/3wpjerpw

Short Takes – 3-31-25 – Isar launch failure – 1stAmendment attacks – ICE arrests citizen – Chinese Bluetooth detection satellite – Signal gate SECOPs perspective – Luna lockout – Vaccine official resigns – https://tinyurl.com/3j9zknec

Committee Hearings – Week of 3-30-25 – House hearings on cybersecurity, space geek, and cUAS issues – No Senate hearings of interest here – https://tinyurl.com/mdprd93s Subscription required #Hearings

Review – HR 1126 Introduced – E Palestine Health Study – Would require HHS to conduct a study on the health effects of the 2023 East Palestine, OH train derailment – Short version – https://tinyurl.com/53n66hdd #Legislation

HR 1126 Introduced – E Palestine Health Study – Would require HHS to conduct a study on the health effects of the 2023 East Palestine, OH train derailment – https://tinyurl.com/ms7emh2k Subscription required #Legislation

Review – HR 866 Introduced – ROUTERS Act – Would require a study on the national security risks of consumer routers and modems manufactured in China – Short version – https://tinyurl.com/568y3zf5 #Legislation

HR 866 Introduced – ROUTERS Act – Would require a study on the national security risks of consumer routers and modems manufactured in China – https://tinyurl.com/9dj354t9 Subscription required #Legislation

CFSN Detailed Analysis - Substack Daily Update – 3-29-25 – Free Content – https://tinyurl.com/4ztbsvy4

Short Takes – 3-29-25 – FRAM2 mission launch – Quasi-lithium cathode – Trump pushes more tariffs – Jail and fines for homeless – 2ndRussian front – https://tinyurl.com/43py3pf9

Chemical Incident Reporting – Week of 3-22-25 – 2 incidents, 1 CSB reportable, 1 probable CSB reportable – https://tinyurl.com/yc828jsw #ChemicalIncident #CSB

Review – Public ICS Disclosures – Week of Week of 3-22-25 – Moderately busy disclosure week – 31 vendor disclosures – 2 vendor updates – Short version –https://tinyurl.com/bdz46pm4 #icsSecurity

Public ICS Disclosures – Week of Week of 3-22-25 – Moderately busy disclosure week – 31 vendor disclosures – 2 vendor updates – https://tinyurl.com/4tvthkyb Subscription required #icsSecurity