Patrick Coyle @Pjcoyle@qoto.org

6 Advisories and 1 Update Published – 5-12-26 – NCCIC-ICS control system security advisories for products from ABB (4), Subnet, and Fuji – Update for products from Ashlar-Vellum - DTRH look at new Ashlar-Vellum vulnerabilities - https://tinyurl.com/4hxrybe8 Subscription required

Reader Question – Which advisory? Why asking about which advisory will have the most impact is the wrong question - https://tinyurl.com/dc8kvs67 #ReaderComment #CISA

CFSN Detailed Analysis - Substack Daily Update – 5-11-26 – Free Content – https://tinyurl.com/4srmjrbx

Review - HR 8646 Introduced – FY 2027 ARD Spending – 1 cyber security mention in the bill and one in the Report – One chemical safety discussion in the Report - https://tinyurl.com/mr4525th #Legislation #ardSpending

Looking Back – 8-3-09 – HR 3258, drinking-water facility security-legislation - https://tinyurl.com/28wtbwjt #LookingBack #ChemicalSecurity

Review - FAA UAS Facility NPRM – UAFR Descriptions – Differences between the two UAS control schemes – Short version - https://tinyurl.com/yrfz54sh #Regulation #UAS #UAFR #FAA

FAA UAS Facility NPRM – UAFR Descriptions – Differences between the two UAS control schemes – Facility eligibility - https://tinyurl.com/y66px7jx Subscription required #Regulation #uasDesignation #FAA

Review - Public ICS Disclosures – Week of 5-2-26 – Part 2 – 7 additional vendor disclosures – 8 researcher reports – 2 exploits – Short version -https://tinyurl.com/24k8nrmw #icsSecurity

Public ICS Disclosures – Week of 5-2-26 – Part 2 – 7 additional vendor disclosures – 8 researcher reports – 2 exploits - https://tinyurl.com/4bdwkb7a Subscription required #icsSecurity

CFSN Detailed Analysis - Substack Daily Update – 5-9-26 – Free Content – https://tinyurl.com/ewsbwx3m

4 incidents – 1 probable CSB reportable – 2 possible CSB reportable - https://tinyurl.com/43krpnws #ChemicalIncident #CSB

Review – Public ICS Disclosures – Week of 5-2-26 – Part 1 – Somewhat busy disclosure week – For Part 1 we have 9 vendor disclosures – Short version - https://tinyurl.com/36hz9vpd #icsSecurity

Public ICS Disclosures – Week of 5-2-26 – Part 1 – Somewhat busy disclosure week – For Part 1 we have 9 vendor disclosures – https://tinyurl.com/mr5jruj8 Subscription required #icsSecurity

CFSN Detailed Analysis - Substack Daily Update – 5-8-26 – Free Content – https://tinyurl.com/ypph2rdf

Chemical Transportation Incidents – Week of 4-4-26 – 509 incidents (468 highway, 36 air, 5 rail) - 4 serious incidents (3 Bulk release, 1 evacuation, 2 fire/explosion, 40 no release) - https://tinyurl.com/bdembupf #ChemicalIncident #PHMSA

Review – Bills Introduced – 5-7-26 – 70 bills – HR 8697, NG cUAS authorization – HR 8701 & HR 8702, DHS reorganization – HR 8711, Data Center security – Short version - https://tinyurl.com/2h48ut7v #Legislation #DHS #cUAS

Bills Introduced – 5-7-26 – 70 bills – HR 8697, NG cUAS authorization – HR 8701 & HR 8702, DHS reorganization – HR 8711, Data Center security - https://tinyurl.com/4hyas88y Subscription required #Legislation #DHS #cUAS

CFSN Detailed Analysis - Substack Daily Update – 5-7-26 – Free Content –

Review – 1 Advisory and 4 Updates Published – 5-7-26 – NCCIC-ICS control system security advisory for products from MAXHUB – ICS updates for Intrado and Schneider – MedDevice updates for Medtronic (2) - Short version - https://tinyurl.com/5n83pb83 #icsSecurity