Hardy Barth Salia EV Charge Controller Vulnerabilities, 2 CVEs, CVSS 7.3

CISA ICS-CERT published an advisory disclosing two vulnerabilities in the Hardy Barth Salia EV Charge Controller affecting firmware version 2.3.81 and earlier. CVE-2025-5873 (CVSS 6.3) and CVE-2025-10371 (CVSS 7.3) both involve unrestricted file upload vulnerabilities in the web interface component that could allow remote code execution. The vulnerabilities affect Energy and Transportation Systems critical infrastructure sectors deployed worldwide. Public proof-of-concept exploits have been disclosed; Hardy Barth did not respond to CISA's coordination requests.

Zero Motorcycles Firmware Bluetooth Pairing Vulnerability

CISA published ICS Advisory ICSA-26-111-06 disclosing CVE-2026-1354, a medium-severity (CVSS 6.4) Bluetooth pairing vulnerability affecting Zero Motorcycles firmware versions 44 and prior. The flaw, CWE-322 (Key Exchange without Entity Authentication), could allow an attacker in proximity to forcibly pair a device with the motorcycle and potentially upload malicious firmware via over-the-air update functionality. The vendor plans to release a firmware remediation in May 2026.

Siemens SCALANCE W-700 Devices Affected by 14 Vulnerabilities, Update Available

CISA ICS-CERT issued advisory ICSA-26-111-07 notifying that Siemens SCALANCE W-700 IEEE 802.11n family devices running versions before V6.6.0 are affected by 14 vulnerabilities, including KRACK-related CVEs (CVE-2020-24588, CVE-2020-26139, CVE-2020-26140, CVE-2020-26141, CVE-2020-26143, CVE-2020-26144, CVE-2020-26146, CVE-2020-26147) and additional CVEs affecting OpenSSL and other components. Siemens has released version V6.6.0 addressing these vulnerabilities and recommends updating to the latest version. 27 distinct product model numbers across the W721, W722, W734, W738, W748, W761, W774, and W778 product lines are affected.

Siemens RUGGEDCOM CROSSBOW SAC SQLite Vulnerability CVE-2025-6965

CISA republished Siemens ProductCERT advisory ICSA-26-111-08 disclosing a high-severity vulnerability (CVSS 7.7) in Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC). The vulnerability (CVE-2025-6965) is a Numeric Truncation Error in SQLite versions before 3.50.2 that could allow arbitrary code execution and denial of service. Affected versions are RUGGEDCOM CROSSBOW SAC vers:intdot/<5.8. Siemens has released version 5.8 as the vendor fix and recommends immediate update.

Siemens SINEC NMS Authorization Bypass Vulnerability, CVSS 8.8

CISA republished Siemens ProductCERT advisory SSA-605717 disclosing an authorization bypass vulnerability (CVE-2026-25654) in SINEC NMS before V4.0 SP3. The flaw allows an authenticated remote attacker to bypass authorization checks and reset passwords for arbitrary user accounts. CVSS v3.1 base score is 8.8 (HIGH). Affected organizations should update to V4.0 SP3 or later and limit network access to trusted users and systems only.

Silex Technology SD-330AC and AMC Manager 12 Critical Vulnerabilities

CISA ICS-CERT published advisory ICSA-26-111-10 disclosing 12 critical vulnerabilities in Silex Technology SD-330AC (firmware <=1.42) and AMC Manager (<=5.0.2) devices. Vulnerabilities include stack-based buffer overflow (CVSS 8.8), heap-based buffer overflow (CVSS 9.8), missing authentication for critical functions, hard-coded cryptographic keys, and improper input neutralization. Successful exploitation could allow arbitrary code execution, denial-of-service, or unauthorized configuration changes without authentication. Vendor fixes are available: SD-330AC firmware Ver 1.50 or later and AMC Manager Ver.5.1.0 or later.

Siemens Industrial Edge Management Auth Bypass, CVSS 7.1

CISA and Siemens ProductCERT published ICS Advisory ICSA-26-111-11 disclosing an authorization bypass vulnerability (CVE-2026-33892, CVSS 7.1) in Siemens Industrial Edge Management. Affected versions include IEM Pro V1 (<1.15.17), IEM Pro V2 (<2.1.1), and IEM Virtual (<2.8.0). An unauthenticated remote attacker could circumvent authentication and access connected Industrial Edge Devices through the remote connection feature. Siemens recommends updating to the latest versions.

SenseLive X3050 10 Critical Vulnerabilities CVSS 9.8

CISA ICS-CERT published advisory ICSA-26-111-12 disclosing 11 vulnerabilities in SenseLive X3050 industrial IoT gateways (firmware V1.523). The highest-severity flaw (CVE-2026-40630, CVSS 9.8) enables authentication bypass on the web management interface, potentially allowing an attacker to take complete control of the device. Vulnerabilities include hardcoded credentials, insufficient session expiration, cleartext transmission of sensitive data, and missing authentication for critical functions. SenseLive did not respond to CISA's coordination requests; no vendor patch is available. Affected users in critical manufacturing, water/wastewater, and energy sectors are advised to contact SenseLive directly.

HUD Announces Disaster Aid and Financial Flexibility for Hawaii Residents Impacted by 2026 Kona Low Weather Systems

HUD announced federal disaster assistance for Hawaii residents impacted by Kona low weather systems (March 10-24, 2026), following President Trump's major disaster declaration on April 7, 2026 (DR 4909). The relief includes a 90-day foreclosure moratorium for FHA-insured mortgages and Section 184 Indian Home Loan Guarantee program mortgages, automatic 90-day extension for Home Equity Conversion Mortgages, and access to Section 203(h) and 203(k) loan programs for reconstruction and rehabilitation. CPD grantees and tribal housing entities may apply for administrative flexibility.

Singapore Japan Health Products Reliance MOC Signed

Singapore's Health Sciences Authority (HSA) and Japan's Ministry of Health, Labour and Welfare (MHLW) signed a Memorandum of Cooperation (MOC) on 20 April 2026 in Tokyo to enhance bilateral cooperation in health products regulation. The agreement establishes GMP inspection reliance arrangements enabling mutual recognition of GMP certificates and inspection outcomes for pharmaceutical manufacturers, potentially removing an average of three duplicative inspections per year and improving patient access to medicines by up to six months. The MOC covers the full product lifecycle from clinical trials through post-market oversight, building on prior cooperation since the 2002 Japan–Singapore Economic Partnership Agreement.

Scam Alert: Fraudulent Bank Websites and Phishing

The Hong Kong Monetary Authority (HKMA) issued a scam alert on 21 April 2026 notifying the public of fraudulent websites, internet banking login screens, and phishing messages reported in connection with five named banks: The Bank of East Asia, Limited; Shanghai Commercial Bank Limited; Chong Hing Bank Limited; OCBC Bank (Hong Kong) Limited; and Ant Bank (Hong Kong) Limited. The HKMA reminded the public that banks will not send SMS or emails with embedded hyperlinks directing customers to conduct transactions, nor will they solicit sensitive information such as login passwords or One-Time Passwords by phone, email, or SMS. The HKMA provided the Hong Kong Police Force Crime Wing Information Centre contact number (2860 5012) for reporting.

HKMC 2025 Results: HK$6.9B Loan Assets, HK$70.5B Debt Issued

The Hong Kong Mortgage Corporation Limited (HKMC) announced its 2025 annual results, reporting HK$6.9 billion in loan assets acquired (up from HK$3.9 billion in 2024) and HK$70.5 billion in corporate debts issued. The corporation recorded a consolidated loss after tax of HK$109 million, improved from a loss of HK$418 million in 2024. Its capital adequacy ratio stood at 18.1% as of December 31, 2025, well above the 8% minimum requirement.

Exchange Fund Bills Tender Results — HK$131.1B Applied, 2.32% Yield

The HKMA announced results of an Exchange Fund Bills tender held on 21 April 2026. Two EF Bills issues were auctioned — Q2616 (HK$131.1B applied, HK$65.6B allotted, 2.32% average yield) and H2645 (HK$41.7B applied, HK$12.0B allotted, 2.37% average yield). The HKMA also published the upcoming week's tender schedule for 28 April 2026.

OJP FY 2026 Special Attorneys Program: Up to $1M for Cross-Designated Prosecutors

The Office of Justice Programs, Bureau of Justice Assistance (BJA), has posted the FY 2026 Special Attorneys Program funding opportunity. State, local, Tribal, and territorial governments may apply for up to $1,000,000 in cooperative agreement funding to assign or hire prosecutors as cross-designated Special Attorneys or Special Assistant United States Attorneys. These prosecutors will investigate and prosecute fraud, criminal aliens, drug trafficking, and human trafficking crimes. Applications close May 15, 2026.

SBA CY 2025 SBDC Program: $200k–$8.4M Funding Opportunity

The Small Business Administration (SBA) published a funding opportunity for the CY 2025 Small Business Development Center (SBDC) Program, offering $140,000,000 in total program funding. Individual awards range from $200,000 to $8,393,834, with an expected 62 awards. Eligible applicants include public and private institutions of higher education, 501(c)(3) nonprofits, and state governments, subject to Title 13 CFR Section 130.200 requirements. Applications close April 22, 2026.

Local Food Promotion Program FY2026, $25K-$500K Awards, Closes June 5

USDA Agricultural Marketing Service published the FY2026 Local Food Promotion Program (LFPP) funding opportunity. The program supports local and regional food business enterprises engaged in indirect producer-to-consumer marketing. $13,840,000 in total funding is available for 55 expected awards ranging from $25,000 to $500,000. Applications close June 5, 2026.

Regional Food System Partnership Grant FY2026, $100k-$1M, Due Jun 5

The USDA Agricultural Marketing Service requests applications for the 2026 Fiscal Year Regional Food System Partnerships grant program. Approximately $4.71 million is available, with individual awards ranging from $100,000 to $1,000,000. The program supports partnerships connecting public and private resources to plan and develop local and regional food systems, direct producer-to-consumer marketing, and value-added agricultural products. Applications close June 5, 2026.

Lane County Oregon Conservation Services Grant, $20k-$175k, Closes May 21

The US Army Corps of Engineers (USACE) Portland District has posted a discretionary cooperative agreement (W9127N-26-2-R003) under Assistance Listing 12.010 for land stewardship and restoration services at Willamette Valley Project sites in Lane County, Oregon. The funding opportunity ranges from $20,000 to $175,000 (expected award $155,000), with no cost-sharing requirement. Applications close May 21, 2026.

FMPP FY2026 Grant $50K-$500K for Farmers Market Promotion

USDA Agricultural Marketing Service announces the Farmers Market Promotion Program (FMPP) FY2026 funding opportunity. The program provides $13.84 million to support direct producer-to-consumer markets and increase access to locally produced agricultural products. Awards range from $50,000 to $500,000, with up to 55 expected awards. Applications close June 5, 2026.

NOAA-NMFS Species Recovery Grants to States FY2026, $250k Max

NOAA's National Marine Fisheries Service published a funding opportunity for Species Recovery Grants to States (Assistance Listings 11.064) under Section 6 of the Endangered Species Act. State agencies with a current or pending section 6(c) agreement are eligible to apply for up to $250,000 to support conservation programs for listed marine and anadromous species. Applications close June 20, 2026.

NIST Issues Guidance on IoT Cybersecurity Activities for Manufacturers

NIST published NISTIR 8259r1, Foundational Cybersecurity Activities for IoT Product Manufacturers, recommending cybersecurity activities manufacturers should consider before selling IoT products. The publication addresses the gap where IoT products often lack cybersecurity capabilities customers need to mitigate risks. Recommendations focus on improving product securability and providing customers with cybersecurity-related information.

New Traffic Signal at U.S. 49 and East Wortham Rd

MDOT announced the installation of a new traffic signal at the intersection of U.S. 49 and East Wortham Rd. in Harrison County as part of a $714,000 intersection improvement project. The signal will be placed in flash mode starting April 23, 2026, for a week or two before beginning full operation. The project was awarded to Powell Construction Services of Vancleave and is expected to be complete within the next few weeks.

MDOT Memorial Ceremony Honors Fallen Roadside Workers in Jackson

MDOT hosted its annual Fallen Workers Memorial Ceremony at its Jackson headquarters to honor 50 employees who lost their lives in service to Mississippi. The ceremony included remarks from Director Brad White, Commissioner Willie Simmons, and Speaker of the House Jason White, and added the name of Johnny C. Adams to the memorial. Governor Tate Reeves proclaimed April 20–24 as Work Zone Awareness Week in Mississippi.

D-Cycloserine Phase 4 Hereditary Spastic Paraplegia Trial

NIH registered a Phase 4 clinical trial (NCT07542548) investigating D-cycloserine for serine palmitoyltransferase inhibition to mitigate neurological decline associated with SPTSSA-related Complex Hereditary Spastic Paraplegia. The single-arm trial lists 25 participants with D-cycloserine as the sole intervention. This is an informational registration entry on ClinicalTrials.gov, not a regulatory approval or safety action.

Simulation-Based Childbirth Training and Midwives' Outcomes

NIH registered a randomized controlled trial (NCT07543133) evaluating simulation-based childbirth management training on safe motherhood practices and intrinsic motivation among midwives. Participants are randomly assigned to either an intervention group receiving simulation training or a control group receiving no additional training, with outcomes assessed using validated scales.

Evaluation of the Sedative Effect of Contextualized Music Listening on Patient Pain and Anxiety in a Dental Care Setting

A clinical trial examining whether listening to culturally and personally contextualized music reduces pain and anxiety in adults undergoing dental procedures has been registered on ClinicalTrials.gov. The interventional study will enroll 30 participants in a private dental clinic setting, comparing alternating phases with and without music during dental drilling procedures for caries. Researchers will measure heart rate, blood pressure, pain levels, and self-reported anxiety to evaluate the sedative effect of the musical intervention.

AI-Based Prognostic Assay Validation for Early Breast Cancer

ClinicalTrials.gov registered NCT07541703, an observational study by Spotlight Medical and the Austrian Breast Colorectal Cancer Study Group (ABCSG) validating a locked AI-based prognostic assay in ER-positive/HER2-negative early breast cancer patients. The blinded retrospective study will use digitized H&E slides from ABCSG-8 with extended follow-up from ABCSG-16 to link assay outputs to clinical outcomes.

Pulsed-Field Ablation With or Without Electrogram Mapping for Non-Paroxysmal Atrial Fibrillation

NIH registered a prospective multicenter randomized controlled trial (NCT07541989) comparing two pulsed-field ablation strategies for non-paroxysmal atrial fibrillation: PFA-based pulmonary vein isolation plus posterior wall isolation alone versus the same approach plus adjunctive ablation guided by electrogram mapping of key substrates. The study aims to evaluate efficacy and safety in a broader clinical setting.

Double-T Phase 2 Trial of Glofitamab for Relapsed/Refractory Large B-Cell Lymphoma

NIH registered Phase 2 clinical trial NCT07542678 (Double-T) on ClinicalTrials.gov, investigating a glofitamab-based double T-cell therapy strategy in high-risk relapsed/refractory large B-cell lymphoma patients eligible for CAR-T cell therapy. The trial will collect safety, efficacy, and quality of life data across induction and consolidation phases.

NIH Registers Phase 1 T2DM Oxidative Stress Study

NIH has registered a Phase 1 clinical trial (NCT07541729) on ClinicalTrials.gov evaluating Rosmarinus officinalis (rosemary) extract in patients with Type 2 Diabetes Mellitus (T2DM). The 12-week randomized study will assess the extract's effects on oxidative stress and inflammatory biomarkers versus placebo. Participants will be randomly assigned to receive either rosemary extract or placebo for the study duration.

Respiratory Physiotherapy and PMR After Cardiac Surgery Randomized Controlled Trial

NIH ClinicalTrials.gov registered a randomized controlled trial (NCT07542691) evaluating respiratory physiotherapy combined with progressive muscle relaxation exercises in 116 cardiac surgery patients. The intervention group will receive 30 minutes of combined therapy daily for three consecutive days in addition to routine postoperative care, while the control group receives routine care only. Outcome measures include dyspnea, anxiety, hemodynamic parameters, and delirium symptoms.

Tailored Yoga Therapy for ADHD Adults, Apr 21

NIH ClinicalTrials.gov has registered a study (NCT07541820) examining the feasibility, acceptability, and potential benefits of a group-based tailored yoga programme for adults experiencing ADHD symptoms. The yoga intervention is compared to an active control (group-based functional movement classes). The trial is registered as an observational study with no firm start date stated beyond April 21, 2026.

Verification of Range Accuracy and Correlation With Clinical Toxicity Using Offline PET/CT for Hypofractionated Proton Radiotherapy in Breast Cancer

NIH registered clinical trial NCT07543107, a single-arm prospective observational study evaluating offline PET/CT verification of proton range accuracy in hypofractionated radiotherapy for postoperative breast cancer. The study will analyze correlation between range error and clinical toxicities including radiation pneumonitis and rib fracture.

Extends Motor Vehicle Transaction Fee Provisions and DMV Costs

New York Governor signed Bill A10761 into law as Chapter 99 on March 31, 2026. The bill extends provisions relating to increased motor vehicle transaction fees and certain costs of the Department of Motor Vehicles. The sponsor was Assemblymember Gary Pretlow.

Congratulating Kenmore East High School Model United Nations Team on Competition Win

The New York State Assembly adopted Resolution K01115, congratulating the Kenmore East High School Model United Nations Team on winning the WNY Model UN General Assembly competition held on March 17, 2026. The resolution was introduced by William Conrad and adopted on March 31, 2026. This is a ceremonial legislative resolution with no regulatory or compliance requirements.

St Louis Pipeline Gets Extension to 17th Jun

FERC issued a delegated order on April 21, 2026 granting St Louis Pipeline Corporation an extension of time to June 17, 2026 to file its 2025 FERC Form No. 6 annual report. The request was filed on April 20, 2026 under Docket AC26-61-000.

BitClave PTE LTD Third Fair Fund Disbursement

The SEC orders a third distribution of $11,969.62 from the BitClave fair fund to two harmed investors not included in prior disbursements. The Fund Administrator, after reserving $407,485.37 for taxes and administrative costs, determined this subsequent distribution is feasible. Upon completion of all three distributions, affected investors will have received 125.25% of their Recognized Loss.

Trump Proposes $111.1B HHS Budget for FY2027

President Trump's proposed FY2027 HHS budget requests $111.1 billion in discretionary authority, a $15.8 billion (12.5%) decrease from FY2026. The budget increases CMS Program Integrity funding by $35 million (total $976 million HCFAC) targeting healthcare fraud, waste, and abuse in government payer programs, while decreasing HHS OIG funding by $84 million overall. CMS Program Management receives $811 million for Medicare Parts A and B operations and $112 million for Parts C and D, with proposals to rebalance contractor-to-employee ratios.

Drug Pricing Legal Updates, IRA Challenges, 340B Program

Latham & Watkins' April 2026 Drug Pricing Digest reports ongoing IRA legal challenges with the US Supreme Court weighing certiorari, stakeholder discussions on MFN policy and Section 232 tariffs, and multiple 340B program developments including a major manufacturer's litigation challenging the HRSA patient definition and third-party data reporting requirements.

OIG Advisory Opinion No. 26-02: Guardrails for MSOs Owning Clinical Labs Under Anti-Kickback Statute

The HHS Office of Inspector General issued Advisory Opinion No. 26-02, a favorable opinion concluding that a Management Service Organization (MSO) could own and operate an independent clinical laboratory that accepts referrals from affiliated urgent care centers without implicating the federal Anti-Kickback Statute (AKS). The opinion focuses on three remuneration guardrails: no provider compensation tied to lab referral volume, no remuneration flowing from the lab to the urgent care centers, and no payment to centers or providers from laboratory revenue. The opinion provides instructive compliance guidance for MSOs, urgent care clinics, and clinical laboratories pursuing integrated care models.

Congress Debates FY2027 Health Budget as RFK Jr. Testifies, CDC Director Nominated

HHS Secretary Robert F. Kennedy Jr. testified before multiple House committees on April 17, 2026, covering the Trump Administration's FY2027 health priorities, including chronic disease prevention, nutrition, and healthcare affordability under the MAHA agenda. The Trump Administration also nominated Erica Schwartz as CDC Director, pending Senate confirmation. Several healthcare bills were discussed, including the bipartisan CLEAR Labels Act on pharmaceutical supply chain transparency and the Chronic Care Management Improvement Act on Medicare cost-sharing.

ASN Urges $1B FY27 Kidney Research, Living Donor Act

Benesch's healthcare regulatory digest reports that the American Society of Nephrology (ASN) sent an advocacy delegation to meet with congressional members requesting $1 billion in FY27 funding for kidney health research and supporting the Expanding Support for Living Donors Act. This is an informational newsletter covering nephrology industry advocacy efforts.

Truist Bank Data Transmission Systems for Mobile Network Routing

USPTO published patent application US20260099822A1 assigned to Truist Bank, covering systems and methods for receiving and routing resource requests from mobile devices between users. The invention enables a processor to transmit a resource request from a first user's mobile device to a second user's mobile device, where the second user has a predetermined time window to respond. The system adds a mobile calendar reminder to the second user's device, determines whether a response is received after the time window expires, and terminates the request with notification to the first user if no response is received.

Mobile Device Security Services During Power Management Mode

CUPP Computing AS has filed US Patent Application US20260099603A1 covering systems and methods for providing security services during a mobile device power management mode. The invention detects a wake event and issues a wake signal to bring the device out of low-power state, enabling the security system to scan for viruses, malware, update security applications, and detect unauthorized data while minimising power consumption.

Utah to Receive $10.7M from $773.7M Albertsons Opioid Settlement

Utah has joined a multistate agreement in principle requiring Albertsons Companies Inc. to pay more than $773.7 million to resolve its role in the opioid epidemic. Utah is expected to receive at least $10.7 million, which will flow through the Utah Opioid Abatement Fund to support addiction treatment, recovery services, and prevention programs statewide. The parties have agreed on total payment terms; negotiations over injunctive relief remain ongoing.

Marcus Sanfratello Sentenced to 20 Years for 1983 Homicide of Teresa Peroni

The Oregon Department of Justice announced that Marcus Sanfratello, 73, pleaded guilty to Manslaughter in the First Degree and was sentenced to 20 years in prison for the 1983 homicide of Teresa Peroni. Under the plea agreement, Sanfratello will serve a minimum of 10 years. The cold case was reopened in 2024 using modern forensic DNA techniques and new witness interviews, leading to a June 2025 indictment by a Josephine County grand jury.

WTO Workshop on LDC Technology Transfer

WTO Deputy Director-General Xiangchen Zhang opened a workshop on incentives for technology transfer to least-developed countries (LDCs) on 21 April 2026, emphasizing that effective transfer requires predictable legal frameworks, access to finance, absorptive capacity, and private sector engagement. The workshop, bringing together participants from LDCs, developed member countries, WIPO, FAO, and the UN Technology Bank, held panel discussions on enabling conditions for cross-border technology transfer under Article 66.2 of the TRIPS Agreement.

Oahu PUC Office Closed Tuesday Due to Power Outage

The Hawaii Public Utilities Commission's Oahu office is closed April 21, 2026, due to a power outage affecting the building. Filings and payments due on April 21 will be considered timely if submitted on the next business day the PUC re-opens. Business may continue online through the eServices portal.

Solutions First FCU Proposed Merger into Guardian CU

NCUA has filed for public review the proposed merger of Solutions First FCU into Guardian CU. The filing is subject to NCUA approval under the Federal Credit Union Act. No final action has been taken; the proposal is open for regulatory review and comment.

Waterbury Credit Union Member Notice, April 2026

NCUA published a member notice from Waterbury Credit Union on April 21, 2026. The document, filed under docket NCUA-2026-0959-0002, is accessible via regulations.gov. The specific content of the member notice is not visible in the available source metadata.