Review - HR 10790 Introduced – CSB Board Composition

Earlier this month, Rep Perez (D,WA) introduced HR 10790, the Chemical Safety Board Accountability Act. The bill amends 42 USC 7412(r)(6)(B) [pg 19] setting forth the requirements for the appointment of Board members for the Chemical Safety Board (CSB), including requiring one Board member with a labor background. It also establishes a deadline for appointing replacement board members. No new funding is authorized. 

Moving Forward  

Perez is not a member of the House Energy and Commerce Committee to which this bill was assigned for consideration. This means that there is not likely to be sufficient influence to see the bill considered by that Committee. With the President’s well-known opposition to the Board, I would expect that Republican members of the Committee would not support this bill, particularly the provisions requiring Board Appointments. 

Commentary 

I briefly discussed the problems with requiring Board members with particular, and those comments still stand. 

For more information on the provisions of this bill, including a look at the potential end of the Board on January 15th, 2028, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/hr-10790-introduced-csb-board-composition - subscription required. 

Chemical Transportation Incidents – Week of 9-12-26

Reporting Background 

See this post for explanation, with the most recent update here (removed from paywall). 

Data from PHMSA’s online database of transportation related chemical incidents that have been reported to the agency. 

Incidents Summary  

• Number of incidents – 507 (473 highway, 30 air, 3 rail, 1 water) 
• Serious incidents – 4 (4 Bulk release, 0 evacuation, 0 injury, 0 death, 0 major artery closed, 0 fire/explosion, 32 no release)  
• Largest container involved – 26,425-gal DOT 111S100W1 Railcar {Diesel Fuel? (UN1202)} Vacuum relief valve venting. 
• Largest amount spilled – 2,400-gal DOT 111A100W3 Railcar {Environmentally Hazardous Substances, Liquid, N.O.S.} Tank shell leaking under jacket. 
• Total amount reported spilled in all incidents – 4863.4-gal 

NOTE: Links above are to Form 5800.1 for the incident described. 

Most Interesting Chemical: Maleic Anhydride: Colorless crystalline needles, flakes, pellets, rods, briquettes, lumps or a fused mass. Melts at 113°F. Shipped both as a solid and in the molten state. Vapors, fumes and dusts strong irritate the eyes, skin and mucous membranes. Flash point 218°F. Autoignition temperature 890°F. Used to make paints and plastics and other chemicals. (Source: CameoChemicals.NOAA.gov).  

INSERT UN 2215 Placard 

Review – 5 Advisories and 1 Update Published – 10-15-26

Today, CISA’s NCCIC-ICS published three control system security advisories for products from Guangzhou Juan IoT Technology, Eclipse Foundation, and CISA. They also published two medical device security advisories for products from J4Care and Thermo Fisher. They also updated a control security advisory for products from Red Lion. 

Advisories  

Guangzhou Advisory - This advisory describes three vulnerabilities in the Guangzhou Juan IoT Technology EseeCloud video surveillance software. The vulnerabilities were reported to CISA by Donghyeon Lee of Tokyo University of Science and GMO Flatt Security. CISA notes that: “Guangzhou Juan IoT Technology Co., Ltd. did not respond to CISA's coordination attempts.” 

Eclipse Advisory - This advisory describes five vulnerabilities in the Eclipse Milo OPC UA implementation. The vulnerabilities were reported to CISA by Abhinav Agarwal.  

CISA Advisory - This advisory discusses six vulnerabilities in the CISA Malcolm network traffic analysis tool suite. The vulnerabilities were reported to CISA by Seth Grover of Idaho National Laboratory. 

J4Care Advisory - This advisory describes six vulnerabilities in the J4Care dcm4che open-source toolkit for DICOM. The vulnerabilities were reported to CISA by Abhinav Agarwal. 

Thermo Fisher Advisory - This advisory describes a path traversal vulnerability in the Thermo Fisher Torrent Suite Software. The vulnerability was reported to CISA by Akanksha Raghvesh and Abhinav Agarwal. 

Red Lion Update - This update provides additional information on the N-Tron 700 Series advisory that was originally published on October 8th, 2026. The new information includes updating CVSS V4.0 scores, and broken links. 

For more information on these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/5-advisories-and-1-update-published-547 - subscription required. 

Review - HR 10569 Introduced – CISA and Biosecurity

Last month, Rep Khanna (D,CA) introduced HR 10569, the Protecting Biotechnology and Biomanufacturing as Critical Infrastructure Act. The bill would amend 6 USC 652 to require CISA to treat biotechnology and biomanufacturing as critical infrastructure even though it does not have a designated Sector Specific Agency designation. No new funding is authorized by this bill. 

According to a press release from the office of Rep Peters (D,CA), a cosponsor of this bill: 

“America’s leadership in the sector is a strategic advantage we cannot take for granted. As technology advances and our adversaries grow more capable, American national security, public health, and competitiveness will continue to face more serious threats. Our legislation will strengthen America’s biotech ecosystem against cyber threats, supply chain disruptions, and other vulnerabilities. To maintain our leadership in biotechnology, we need to make sure that the United States remains a safe place to innovate.” 

Moving Forward  

Neither Khanna, nor his two cosponsors, are members of the House Homeland Security Committee to which this bill was assigned for consideration. This means that there is little chance of the bill being considered by that Committee. I would not expect that Committee to consider the bill because of its reliance on the outdated ‘Sector-Specific Agency’ terminology. 

For more information on the provisions of this bill, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/hr-10569-introduced-cisa-and-biosecurity - subscriptions required.