CISA Adds FortiGuard Vulnerability to KEV Catalog – 5-14-25 – Stack-based buffer overflow in five FortiGuard product lines – https://tinyurl.com/ye5m9b7x #KEV #FortiGuard
Industry Still Wants CFATS Back - Alliance for Chemical Distribution is still trying to convince Congress to reinstate the Chemical Facility Anti-Terrorism Standards program – https://tinyurl.com/4jktkza3 #CFATS
Review – Bills Introduced – 5-13-25 – 96 bills – HR 3334, DC cUAS authority – HR 3376 and S 1730, water system spending authority – Space Geek: S 1722, Houston Space Center spending – Short version – https://tinyurl.com/52nxfmxv #Legislation
Bills Introduced – 5-13-25 – 96 bills – HR 3334, DC cUAS authority – HR 3376 & S 1730, water system spending authority – Space Geek: S 1722, Houston Space Center spending – MIP: S Res 219, emolument clause enforcement - https://tinyurl.com/598ukxbc Subscription required #Legislation
After last month's CVE funding crisis, I started talking to experts on what went wrong and what's ahead.
By the end of my interviews, I learned that a chief rival to the CISA-funded MITRE-run program, the CVE Foundation, thinks it can have a CVE database not dependent on the US government up and running by December, with the support of dozens of private sector companies and four non-US governments.
Check out my latest CyberScoop piece. Thanks to Sasha Romanosky, Peter Allor, Jerry Gamblin, Ben Edwards, Jay Jacobs and Michael Roytman for their insight.
CVE Foundation eyes year-end launch following 11th-hour rescue of MITRE program
https://cyberscoop.com/cve-program-funding-crisis-cve-foundation-mitre/
FAA Sends UAS Beyond Visual Line of Sight NPRM to OMB – https://tinyurl.com/4afbbmch #Regulation #FAA #UAS
DOT Sends UAS Flight Restriction Application NPRM to OMB – https://tinyurl.com/mrye6asc #Regulation #cUAS #FAA
CFSN Detailed Analysis - Substack Daily Update – 5-13-25 – Free Content – https://tinyurl.com/3xxc3wa5
Short Takes – 5-13-25 – Cyber hygiene for OT – PFAS reporting changes IFR – FEMA Review Council Meeting – Aircraft and parts §232 investigation – Library of Congress conflict – EUVD – Roberts on MAGA vs Courts – https://tinyurl.com/8vxtcms
Review – 4 Advisories Published – 5-13-25 – NCCIC-ICS control system security advisories for products from ABB and Hitachi Energy (3) – Short version – https://tinyurl.com/yzxswvaz #icsSecurity
4 Advisories Published – 5-13-25 – NCCIC-ICS control system security advisories for products from ABB and Hitachi Energy (3) – I also look at recent change in CISA cybersecurity information distribution – https://tinyurl.com/nhte3bet Subscription required #icsSecurity
FortiGuard published 5 cybersecurity advisories and 7 updates - https://www.fortiguard.com/psirt
Schneider published 5 cybersecurity advisories and 3 updates - https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp NOTE: 1 is not listed on the Schneider site.
Today Siemens published 18 cybersecurity advisories and 15 updates – https://www.siemens.com/global/en/products/services/cert.html
Review – Bills Introduced – 5-12-25 – 17 bills – S 1708, improved rulemaking – Short version – https://tinyurl.com/4ew99n98 #Legislation
Bills Introduced – 5-12-25 – 17 bills – S 1708, improved rulemaking – MIP: S 1711, Chinese automotive technology – https://tinyurl.com/yvxtb8ts Subscription required #Legislation
CFSN Detailed Analysis - Substack Daily Update – 5-12-25 – Free Content – https://tinyurl.com/mr26yktr
Short Takes – 5-12-25 – Small business tariff fallout – NASA budget cuts have international fallout – DOGE spending controls – More flight disruptions probable – https://tinyurl.com/mr3kxdz3
Review – S 1249 Introduced – UAS Zoning Authority – Would provide some State and local government authority of UAS operations – Short version – https://tinyurl.com/3vxnsk46 #Legislation #UAS
Review – Committee Hearings – Week of 5-11-25 – Budget and Reconciliation dominating – DOD space operations – Reauthorization hearings on CISA information sharing, pipeline safety and FAA – Short version – https://tinyurl.com/4h76nrv9 #Hearings