Patrick Coyle @Pjcoyle@qoto.org

PHMSA Publishes HMR Harmonization Final Rule (HM-215Q) – Harmonization with internation rules – Includes incorporation by reference changes and revisions to Hazardous Materials Table - https://tinyurl.com/mwmkmeay #Regulation #PHMSA #HMR

CFSN Detailed Analysis - Substack Daily Update – 4-9-24 – Free Content – https://tinyurl.com/mr8ybhvc

Short Takes – 4-9-24 – War story – DETECT Act – Max Space – CG cybersecurity extension - https://tinyurl.com/393hfyy3

Review – 1 Advisory Published – 4-9-24 – NCCIC-ICS control system security advisory for products from SUBNET – https://tinyurl.com/32tcar6u #icsSecurity

1 Advisory Published – 4-9-24 – NCCIC-ICS control system security advisory for products from SUBNET – DTRH look at the utility of using CWE’s for describing vulnerabilities – https://tinyurl.com/3dtny6pu Subscription required #icsSecurity

Committee Hearings – Week of 4-7-24 – House and Senate back after two week break – Budget hearings continue – Water cybersecurity – https://tinyurl.com/bdd388t8 #Hearings #Cybersecurity #FY2025Spending

Schneider published 1 new advisory and 3 updates - https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp

Siemens published 8 new advisories and 11 updates today - https://www.siemens.com/global/en/products/services/cert.html

OMB Approves OSHA HAZCOM Update Final Rule – Harmonizing US HAZCOM regs with Globally Harmonized System of Classification and Labeling of Chemicals (GHS) latest version – https://tinyurl.com/5n7jrshr #Regulation #OSHA #HAZCOM

CFSN Detailed Analysis - Substack Daily Update – 4-8-24 – Free Content – https://tinyurl.com/2umv8px4

Short Takes – 4-8-24 – Voyager 1 gibberish – LRO picture – Cybersecurity top 10 list – NSA OT signatures – Ukraine hits Russian oil – Military software SNAFU - https://tinyurl.com/2uwu6npc

Review - CIRCIA NPRM – Covered Entity – CISA’s operational, sector-based definition of ‘covered entity’ for purposes of cyber incident reporting requirements – Short version – https://tinyurl.com/2wkssyys #Regulation #CISA #CIRCIA

CIRCIA NPRM – Covered Entity – CISA’s operational, sector-based definition of ‘covered entity’ for purposes of cyber incident reporting requirements – Detailed look at chemical sector definition - https://tinyurl.com/mr2vave6 Subscription required #Regulation #CISA #CIRCIA

OMB Approves STB Expedited Relief ICR – Supports recently approved expedited relief regulation revision – https://tinyurl.com/34nydf3s #ICR #STB #ExpeditedRelief

Chemical Incident Reporting – Week of 3-30-24 – 1 incident, probable CSB reportable - https://tinyurl.com/3af7k9c5

Transportation Chemical Incidents – Week of 3-2-24 – 535 Incidents – 5 serious – no injuries - https://tinyurl.com/47v2rzry #ChemicalIncident #PHMSA

Review – Public ICS Disclosures – Week of 3-30-24 – Moderately busy disclosure week - 5 XZ Utils advisories – 14 other vendor advisories – 4 vendor updates – 5 researcher reports – 1 exploit – Short version – https://tinyurl.com/yckckuwm #icsSecurity

Public ICS Disclosures – Week of 3-30-24 – Moderately busy disclosure week - 5 XZ Utils advisories – 14 other vendor advisories – 4 vendor updates – 5 researcher reports – 1 exploit - https://tinyurl.com/247ytcxs Subscription required #icsSecurity

CFSN Detailed Analysis - Substack Daily Update – 4-5-24 – Free Content – https://tinyurl.com/yjdbwrfj