Patrick Coyle @Pjcoyle@qoto.org

Chemical Incident Reporting – Week of 12-27-25 – 2 incidents – 1 possible CSB reportable – https://tinyurl.com/bdexk4jy #ChemicalIncident #CSB

Review – Public ICS Disclosures – Week of 12-27-25 - Starting out the New Year with a light disclosure week – Bulk disclosures from QNAP (7) – Vendor disclosures from Moxa (2) and VMware – Short version – https://tinyurl.com/yhsnww57 #icsSecurity

Public ICS Disclosures – Week of 12-27-25 - Starting out the New Year with a light disclosure week – Bulk disclosures from QNAP (7) – Vendor disclosures from Moxa (2) and VMware – https://tinyurl.com/2c83efpy Subscription required #icsSecurity

CFSN Detailed Analysis - Substack Daily Update –1-2-26– Free Content – https://tinyurl.com/53s2bs4v

CCPS Safety Beacon - Near-misses predict future incidents - https://www2.aiche.org/sites/default/files/ccps-beacon/202601BeaconEnglish.pdf

Short Takes – 1-2-26 – Iron Beam cUAS (2) – Legacy chem systems – Year end summary – Measles in MA and NJ – Trump vetoes – Candida auris infections – Diego Garcia lost? Backlog List – https://tinyurl.com/4jey8mpz

Review – S 3251 Introduced - State and Local Cybersecurity Grant Program – Would continue authorizing the grant program at current rates – Short version – https://tinyurl.com/dnhbhdta #Legislation #Cybersecurity #Grants

S 3251 Introduced - State and Local Cybersecurity Grant Program – Would continue authorizing the grant program at current rates – https://tinyurl.com/2sbz3rpd Subscription required #Legislation #Grants #Cybersecurity

CFSN Detailed Analysis - Substack Daily Update – 1-1-26 – Free Content – https://tinyurl.com/mtbb847h

Review – HR 6309 Introduced - Cyber Deterrence and Response – Would require designation of, and sanctions against, critical cyber threat actors – Short version – https://tinyurl.com/35uyjs34 #Legislation #CyberSecurity

HR 6309 Introduced - Cyber Deterrence and Response – Would require designation of, and sanctions against, critical cyber threat actors – https://tinyurl.com/hwcehe25 Subscription required #Legislation #CyberResilience

Short Takes – 1-1-26 – Federal Register Edition – DHS privacy act actions – TSA pipeline security ICR revision – https://tinyurl.com/bdcnjp42 #FederalRegister

Review – Pending Rules of Interest – EOY 2025 – 110 rulemakings are currently pending at OIRA – Eight of those are of potential interest here – Short version – https://tinyurl.com/2pn7bumj #Regulations

Pending Rules of Interest – EOY 2025 – 110 rulemakings are currently pending at OIRA – Eight of those are of potential interest here – https://tinyurl.com/3saaewn2 Subscription required #Regulations

CFSN Detailed Analysis - Substack Daily Update – 12-30-25 – Free Content – https://tinyurl.com/u67tvr5c

Review – 1 Advisory and 1 Update Published – 12-30-25 – NCCIC-ICS control system security update for products from WHILL – Updated advisory for AzeoTech – Short version – https://tinyurl.com/4s4m4bdy #icsSecurity

1 Advisory and 1 Update Published – 12-30-25 – NCCIC-ICS control system security update for products from WHILL – Updated advisory for AzeoTech – DTRH look at missing vulnerabilities – https://tinyurl.com/nhhddydh Subscription required #icsSecurity

Review – HR 6042 Introduced – LANDED Act – Includes DHS/FAA delegation of cUAS authority to State and local law enforcement – cUAS grant program - No new funding – https://tinyurl.com/55k8w9yc #Legislation #cUAS #DHS #FAA

HR 6042 Introduced – LANDED Act – Includes DHS/FAA delegation of cUAS authority to State and local law enforcement – cUAS grant program - No new funding – https://tinyurl.com/2v4ddbky Subscription required #Legislation #cUAS #DHS #FAA

Short Takes – 12-30-25 – Federal Register Edition – CG Boca Chica, TX safety zone NPRM – EPA TSCA PMN 30-day ICR notice – USGS meeting notice for NGAC – https://tinyurl.com/t3pdw9ys