CISA Withdraws OBP ICR Reinstatement Request

Yesterday, the OMB’s Office of Information and Regulatory Affairs (OIRA) announced that CISA had withdrawn the new information collection request (ICR) for “Office for Bombing Prevention Technical Analysis”. The 60-day ICR notice was published on July 18th, 2025. The subsequent 30-day ICR notice was published on June 1st, 2026. No reason has been given for the withdrawal of this ICR. 

According to OIRA, the ICR would have supported OBP’s use of the following information collections: 

Pending resubmission of this ICR and the subsequent OIRA approval, as required by the Paperwork Reduction Act, OBP cannot legally require the use of any of those information collections. But, then again, the latest OIRA approval of those ICs ran out in August 2023. Since OBP is not a regulatory agency, I suppose that these ICs are voluntary. It does, however, raise an interesting question. Since OBP requires these forms to be submitted to receive support from the agency, are they truly voluntary? Any lawyers want to weigh in on this? 

FCC Satellite Market Access Reciprocity NPRM to OMB

Yesterday, the OMB’s Office of Information and Regulatory Affairs (OIRA) announced that it had received a notice of proposed rulemaking (NPRM) from the FCC on “Satellite Market Access Reciprocity, GN Docket No. 26-48”. The FCC requested public comment on this docket on February 27th, 2026.  

There was no entry in the 2026 Unified Agenda for this rulemaking. 

Review – 2 Advisories and 1 Update Published – 10-27-26

Today CISA’s NCCIC-ICS published two control system security advisories for products from Mitsubishi and EPICS. One updated advisory was also published for products from Eufy. 

Advisories  

Mitsubishi Advisory - This advisory describes four vulnerabilities in multiple product Mitsubishi and ICONICS product lines. Three of the vulnerabilities were self-reported; the other is a third-party (Google) vulnerability with known exploits. 

EPICS Advisory  This advisory describes four vulnerabilities in the EPICS Base of the Argonne Labs Experimental Physics and Industrial Control Systems (EPICS) toolkit. The vulnerabilities were reported to CISA by Shubham Raj of Cipher by Causal Security. 

Updates  

Eufy Update - This update provides additional information on the Omni C20 advisory that was originally published on September 24th, 2026. The new information includes updating affected versions and the Mitigation section. 

For more information on these advisories, including a DTRH look at publicly available exploits, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/2-advisories-and-1-update-published-e7f - subscription required. 

Review - PHMSA Published International Harmonization NPRM – 10-27-26

Today, DOT’s Pipeline and Hazardous Materials Safety Administration (PHMSA) published a notice of proposed rulemaking (NPRM) on “Hazardous Materials: Harmonization With International Standards”. PHMSA periodically updates the hazardous materials regulations (HMR) to better reflect changes in international hazardous materials shipping regulations. 

The executive summary notes that:  

“The proposed amendments will maintain the current levels of safety achieved under the HMR. Harmonizing the HMR with international regulations and standards will reduce delays and interruptions in the transportation of hazardous materials and promote the free flow of commerce by eliminating unnecessary and outdated regulatory requirements. Overall, the proposed amendments will reduce costs to entities or individuals within the U.S. or otherwise lower the cost of regulations on the U.S. economy.” 

The preamble includes discussions about: 

• Incorporation by Reference 
• Amendments not proposed for adoption,  
• Section-by-section review of NPRM proposals,  
• Regulatory analyses and notices. 

Public Comments  

PHMSA is soliciting public comments on this NPRM. Comments may be submitted via the Federal eRulemaking Portal (www.Regulations.gov; docket # PHMSA-2025-0048). Comments should be submitted to PHMSA by December 28th, 2026. 

For more information on the provisions of this rulemaking, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/phmsa-published-international-harmonization - subscription required. NOTE: Free subscribers to CFSN will receive their email copy of that article on October 29th. 

Short Takes – 10-27-26 - Medical Edition

CDC Issues Emergency Response for Florida Dengue Outbreak. MedPageToday.com article. Pull quote: “Florida is in the midst of its largest dengue outbreak in decades, with 745 cases this year; 425 of those have been locally acquired, and most are concentrated in the Tampa area. That figure marks the largest dengue outbreak in the continental U.S. since 1935.” 

Africa at risk of continent-wide Ebola crisis, health chief warns. Semafor.com article. Pull quote: “More than 4,600 people have died in the outbreak of the Bundibugyo strain which was first detected in DR Congo in May, though health experts believe it had been circulating undetected for weeks. It has now spread further across Africa than any previous Ebola outbreak, with cases in the continent’s central, eastern and western regions. Nigeria, Africa’s most populous country, confirmed its first case of the Bundibugyo strain, for which there is no proven vaccine, despite being absent from the agency’s initial list of 15 countries at risk, he said. Kenya has reported nine cases while Uganda, which recorded 20 cases, was declared free of Ebola in August.” 

GLP-1s May Interact With Psychiatry Medication, Case Report Suggests. MedPageToday.com article.  Pull quote: “While this interaction has been reported before -- it's the fourth reported case of tirzepatide-associated lithium toxicity, they said -- it's still not well understood, Davis said.” 

A fighter pilot had unexplained headaches for over a year, and the cause was hiding in plain sight. LiveScience.com article. Pull quote: "At that point the officer did not connect the cessation of headaches with the use of the new helmet," the doctors reported. "Reviewing the case in its entirety, the diagnosis of migraine or vascular headache was found to be incorrect; instead the individual was suffering from external compression headache due to an ill fitting helmet." 

A woman’s uterus has been kept alive outside the body for the first time. TechnologyReview.com article. Pull quote: “It won’t be easy to maintain a uterus for that long, cautions Brandacher. As far as he knows, no one has been able to maintain a liver for more than seven days. “No studies out there … have shown 30-day survival in a machine perfusion circuit,” he says.” 

Congo’s Ebola outbreak tops 10,000 cases as authorities race to slow the spread in African countries. TheHill.com article. Pull quote: “About 80% of recorded cases are still coming from outside of monitored contacts, showing there are ongoing chains of transmission that health authorities are not aware of. At least 95% of recorded cases are supposed to be coming from known contacts for officials to say the outbreak has largely been brought under control, the Africa CDC has said.”