OMB Approves PHMSA LNG Pipeline Safety Amendments NPRM

Yesterday, OMB’s Office of Information and Regulatory Affairs (OIRA) announced that it had approved a notice of proposed rulemaking (NPRM) from DOT’s Pipeline and Hazardous Material Safety Administration (PHMSA) on “Pipeline Safety: Amendments to Liquefied Natural Gas Facilities”. An advanced notice of proposed rulemaking was published on May 5th, 2025. The NPRM was sent to OIRA on August 21st, 2026. 

According to the 2026 Unified Agenda entry for this rulemaking: 

“This rulemaking would update incorporated industry standards and revise all subparts of part 193 as needed. These updates to part 193 would address the risks associated with today's liquefied natural gas facilities, including permanent, small scale liquefied natural gas pipeline facilities as required by section 27 of the PIPES Act of 2016. These updates would also address section 110 of the PIPES Act of 2020 regarding operating and maintenance standards.” 

OIRA does not classify this rule as a deregulatory action under EO 14192. 

Review – Bills Introduced – 10-6-26

Yesterday, with the House and Senate meeting in pro forma session, there were 22 bills introduced. One of those bills may receive additional coverage in this blog: 

HR 10752 To establish in the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security a task force on artificial intelligence, and for other purposes. Carter, Troy A. [Rep.-D-LA-2] 

For more information on these bills, including legislative history for similar bills in the 118th Congress, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/bills-introduced-10-6-26 - subscription required. 

Review – 6 Advisories Published – 10-6-26

Today, CISA’s NCCIC-ICS published six control system security advisories for products from Hitachi Energy (4), Savannah, and Johnson Controls. 

NOTE: There has been a minor change in the format of the ‘Vulnerabilities’ section of the CISA advisories; more information is available by default on each CVE. 

Advisories  

Hitachi Energy Advisory #1 - This advisory describes six vulnerabilities in the Hitachi Energy RTU500. The vulnerabilities were reported to CISA by Dragos. 

Hitachi Energy Advisory #2 - This advisory discusses two vulnerabilities in the Hitachi Energy REB500. These are third-party vulnerabilities. 

Hitachi Energy Advisory #3 - This advisory discusses an improper input validation vulnerability in the Hitachi Energy SOI. This is a third-party (Apache) vulnerability that is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog. 

Hitachi Energy Advisory #4 - This advisory describes two vulnerabilities in the Hitachi Energy Asset Suite. The vulnerabilities were reported to CISA by EDF. 

Savannah Advisory - This advisory describes a classic buffer overflow vulnerability in the Savannah lwIP SMTP client. The vulnerability was reported by Xchg Labs 

Johnson Control Advisory - This advisory describes two vulnerabilities in the Johnson Controls EasyIO FG. The vulnerabilities were reported by Gabriele Gardois, Zachary Bushell and Lorenzo De Carli of the University of Calgary. 

For more information on these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/6-advisories-published-10-6-26 - subscription required. 

Short Takes – 10-6-26 - Federal Register Edition

FEMA Grants  

Agency Information Collection Activities: Submission for OMB Review, Comment Request; Hazard Mitigation Grant Programs. FEMA 30-day ICR revision notice. Summary: “This collection of information is necessary for eligibility determinations, grants management, and compliance with other Federal laws and regulations for HMA's financial and technical assistance programs. HMA programs included in this information collection are the Flood Mitigation Assistance (FMA) program and FMA Swift Current (Swift Current), the Building Resilient Infrastructure and Communities (BRIC) program, BRIC Direct Technical Assistance (DTA), the Pre-Disaster Mitigation (PDM) program, the Safeguarding Tomorrow Revolving Loan Fund (RLF) Program, the Rehabilitation of High Hazard Potential Dams (HHPD), and the National Dam Safety Program (NDSP).” 

Energy Transportation  

Notice of Rail Energy Transportation Advisory Committee Meeting. STB meeting notice. Summary: “Notice is hereby given of a meeting of the Rail Energy Transportation Advisory Committee (RETAC), pursuant to the Federal Advisory Committee Act.” Meeting date: October 27th, 2026. 

Executive Orders  

EO 14432 - Streamlining Access to Government Services Through America.gov. 

EO 14433 - Eliminating Disease-Carrying Pests and Restoring Enjoyment of the Great Outdoors. 

EO 14434 - Inaugurating the Era of Super Intelligence. 

NOTE: I discovered a valuable information link for Executive Orders during a brief look at America.gov: https://www.federalregister.gov/presidential-documents/executive-orders  

OMB Approves UAS Spectrum Final Rule

Yesterday, the OMB’s Office of Information and Regulatory Affairs (OIRA) announced that it had approved a final rule for the FCC on “Spectrum Rules and Policies for the Operation of Unmanned Aircraft Systems, WT Docket No. 22-323”. The notice of proposed rulemaking was published on February 7th, 2023. An interim final rule was published on January 28th, 2025. 

According to the 2026 Unified Agenda entry for this rulemaking: 

“This proceeding seeks to (1) develop rules enabling the use of the 5030-5091 MHz band for unmanned aircraft systems (UAS); (2) determine whether the Commission’s current rules governing flexible-use bands are adequate and appropriate to ensure co-existence of terrestrial mobile operations and UAS use; and (3) address the need of certain UAS operators to obtain a license in the aeronautical VHF band to communicate with air traffic control and other aircraft.” 

I do not expect to cover this regulation in any detail in this blog. I would expect to announce its publication in the appropriate Short Takes post.