Review – 2 Advisories and 1 Update Published – 10-27-26

Today CISA’s NCCIC-ICS published two control system security advisories for products from Mitsubishi and EPICS. One updated advisory was also published for products from Eufy. 

Advisories  

Mitsubishi Advisory - This advisory describes four vulnerabilities in multiple product Mitsubishi and ICONICS product lines. Three of the vulnerabilities were self-reported; the other is a third-party (Google) vulnerability with known exploits. 

EPICS Advisory  This advisory describes four vulnerabilities in the EPICS Base of the Argonne Labs Experimental Physics and Industrial Control Systems (EPICS) toolkit. The vulnerabilities were reported to CISA by Shubham Raj of Cipher by Causal Security. 

Updates  

Eufy Update - This update provides additional information on the Omni C20 advisory that was originally published on September 24th, 2026. The new information includes updating affected versions and the Mitigation section. 

For more information on these advisories, including a DTRH look at publicly available exploits, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/2-advisories-and-1-update-published-e7f - subscription required. 

Review - PHMSA Published International Harmonization NPRM – 10-27-26

Today, DOT’s Pipeline and Hazardous Materials Safety Administration (PHMSA) published a notice of proposed rulemaking (NPRM) on “Hazardous Materials: Harmonization With International Standards”. PHMSA periodically updates the hazardous materials regulations (HMR) to better reflect changes in international hazardous materials shipping regulations. 

The executive summary notes that:  

“The proposed amendments will maintain the current levels of safety achieved under the HMR. Harmonizing the HMR with international regulations and standards will reduce delays and interruptions in the transportation of hazardous materials and promote the free flow of commerce by eliminating unnecessary and outdated regulatory requirements. Overall, the proposed amendments will reduce costs to entities or individuals within the U.S. or otherwise lower the cost of regulations on the U.S. economy.” 

The preamble includes discussions about: 

• Incorporation by Reference 
• Amendments not proposed for adoption,  
• Section-by-section review of NPRM proposals,  
• Regulatory analyses and notices. 

Public Comments  

PHMSA is soliciting public comments on this NPRM. Comments may be submitted via the Federal eRulemaking Portal (www.Regulations.gov; docket # PHMSA-2025-0048). Comments should be submitted to PHMSA by December 28th, 2026. 

For more information on the provisions of this rulemaking, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/phmsa-published-international-harmonization - subscription required. NOTE: Free subscribers to CFSN will receive their email copy of that article on October 29th. 

Short Takes – 10-27-26 - Medical Edition

CDC Issues Emergency Response for Florida Dengue Outbreak. MedPageToday.com article. Pull quote: “Florida is in the midst of its largest dengue outbreak in decades, with 745 cases this year; 425 of those have been locally acquired, and most are concentrated in the Tampa area. That figure marks the largest dengue outbreak in the continental U.S. since 1935.” 

Africa at risk of continent-wide Ebola crisis, health chief warns. Semafor.com article. Pull quote: “More than 4,600 people have died in the outbreak of the Bundibugyo strain which was first detected in DR Congo in May, though health experts believe it had been circulating undetected for weeks. It has now spread further across Africa than any previous Ebola outbreak, with cases in the continent’s central, eastern and western regions. Nigeria, Africa’s most populous country, confirmed its first case of the Bundibugyo strain, for which there is no proven vaccine, despite being absent from the agency’s initial list of 15 countries at risk, he said. Kenya has reported nine cases while Uganda, which recorded 20 cases, was declared free of Ebola in August.” 

GLP-1s May Interact With Psychiatry Medication, Case Report Suggests. MedPageToday.com article.  Pull quote: “While this interaction has been reported before -- it's the fourth reported case of tirzepatide-associated lithium toxicity, they said -- it's still not well understood, Davis said.” 

A fighter pilot had unexplained headaches for over a year, and the cause was hiding in plain sight. LiveScience.com article. Pull quote: "At that point the officer did not connect the cessation of headaches with the use of the new helmet," the doctors reported. "Reviewing the case in its entirety, the diagnosis of migraine or vascular headache was found to be incorrect; instead the individual was suffering from external compression headache due to an ill fitting helmet." 

A woman’s uterus has been kept alive outside the body for the first time. TechnologyReview.com article. Pull quote: “It won’t be easy to maintain a uterus for that long, cautions Brandacher. As far as he knows, no one has been able to maintain a liver for more than seven days. “No studies out there … have shown 30-day survival in a machine perfusion circuit,” he says.” 

Congo’s Ebola outbreak tops 10,000 cases as authorities race to slow the spread in African countries. TheHill.com article. Pull quote: “About 80% of recorded cases are still coming from outside of monitored contacts, showing there are ongoing chains of transmission that health authorities are not aware of. At least 95% of recorded cases are supposed to be coming from known contacts for officials to say the outbreak has largely been brought under control, the Africa CDC has said.” 

Review – Bills Introduced – 10-26-26

Yesterday, with the House meeting in pro forma session, there were 13 bills introduced. One of those bills may receive additional coverage in this blog: 

HR 10915 To require the Director of the National Institute of Standards and Technology to develop new standards, methodologies, and recommendations with respect to the cybersecurity of cloud-based infrastructure, and for other purposes. McCormick, Richard [Rep.-R-GA-7] 

For more information on these bills, including legislative history for similar bills in the 118th Congress, as well as a mention in-passing of a post-fire landscape restoration bill, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/bills-introduced-10-26-26 - subscription required.