View as a webpage / Share

Volume 24 — Issue 17 | April 25, 2024

CISA hosts Firefighter Cancer Prevention Fireside Chat, May 3

The Cybersecurity and Infrastructure Security Agency’s (CISA’s) Emergency Services Sector Management Team (ES SMT) will host a virtual event on Friday, May 3, 2024, from 11 a.m. to 12:30 p.m. EDT, Firefighter Cancer Prevention Fireside Chat.

The Fireside Chat will focus on and promote health habits in the fire and rescue services, including cancer risk reduction practices.

Two guest speakers will present at the Fireside Chat:

• Russel Osgood, Vice President of Education at the Firefighter Cancer Support Network (FCSN) and current Fire Chief of the Ogunquit, Maine Fire Department.
• Chief Edward “Loy” Senter Jr. of Chesterfield County, Virginia, who served for nearly 27 years at the Norfolk, Virginia Fire-Rescue Department, including 6 years as the Fire and EMS Chief. Chief Senter is the current President of the Metropolitan Fire Chiefs Associations and is a member of the International Association of Fire Chiefs (IAFC) and the National Fire Protection Association (NFPA).

This event will be hosted on Microsoft Teams. Visit CISA’s Teams page for this event to learn more and register.

Email CISA’s ES SMT at EmergencyServicesSector@cisa.dhs.gov with questions or visit CISA.gov/Emergency-Services-Sector for more information.

(Source: CISA)

Highlights

CISA hosts Firefighter Cancer Prevention Fireside Chat, May 3

NHTSA proposal for electric vehicle safety testing and emergency response guidance

Responding to incidents involving individuals with autism

CISA webinar series in May: Artificial Intelligence and the Emergency Services Sector

Cyber Threats

The U.S. Fire Administration operates the Emergency Management and Response – Information Sharing and Analysis Center (EMR-ISAC).

For information regarding the EMR-ISAC visit www.usfa.dhs.gov/emr-isac or contact the EMR-ISAC office at: (301) 447-1325 and/or fema-emr-isac@fema.dhs.gov.

NHTSA proposal for electric vehicle safety testing and emergency response guidance

While electric vehicle fires are rare, there are significant risks to responders and the public if an incident does occur. Risks include electric shock, thermal runaway, battery ignition and reignition, and stranded energy from the lithium-ion battery packs and other high-voltage components. Release of toxic and flammable gasses is also a concern, especially if the vehicle is in a confined space.

On April 15, the National Highway Traffic Safety Administration (NHTSA) published a Notice of Proposed Rulemaking (NPRM) in the Federal Register, which proposes to address many of these safety concerns with comprehensive performance requirements and risk mitigation strategies for EV powertrain components. The NPRM refers to these EV powertrain components collectively as the Rechargeable Electrical Energy Storage System (REESS).

The NHTSA’s NPRM proposes to replace its existing safety testing standard for electric vehicles, Federal Motor Vehicle Safety Standard (FMVSS) No. 305, Electric-powered vehicles: Electrolyte spillage and electrical shock protection, with a revised standard No. 305a, “Electric-powered vehicles: Electric powertrain integrity.” The restructured and upgraded FMVSS No. 305a will facilitate future updates to the standard as battery technologies and charging systems continue to evolve.

Electric vehicle manufacturers would be the most impacted by this NPRM, since their EVs would be subject to the proposed safety testing requirements. However, first and second responders would also be significantly impacted. In addition to the testing requirements, the NHTSA is also proposing requirements to ensure first and second responders have access to vehicle-specific information about extinguishing REESS fires and mitigating safety risks associated with stranded energy when responding to emergencies.

The NHTSA is seeking input from vehicle manufacturers and the emergency response community on several technical points. The most relevant points for responders are included here.

(1) A performance test for the capability to provide audio or visual warning of a thermal event in the battery pack

One major safety concern with EV powertrains is the potential for thermal runaway in the battery pack. Currently, the risk of a spontaneous internal short circuit leading to thermal runaway is heavily dependent on battery design, and the mechanism of an internal short circuit in a cell is complex and requires further study. Therefore, there are currently no broadly applicable performance tests of the battery pack components that could measure or anticipate the risk of thermal runaway.

The NHTSA is proposing to test only whether a REESS is capable of reliably providing a warning when a thermal event (a sudden spike in temperature) occurs in the battery pack. This test would not require the REESS to detect events within the battery back that may have preceded the thermal event (i.e., an internal short circuit), and it would not require the REESS to diagnose the cause of the thermal event. NHTSA is requesting comments on this approach. It is also seeking input on how to develop a broadly applicable, repeatable “thermal propagation test procedure” that would provide warning of an internal short circuit and the capability to sense and judge the degree of risk of severe thermal propagation.

(2) Protection against water exposure

In the U.S., floods resulting from Hurricane Sandy (2012), Hurricane Harvey (2017) and Hurricane Ian (2022) have led to electric vehicles submerged in flood waters for varying periods of time, with varying reports of vehicle fires in the aftermath. The NHTSA is seeking comment on test conditions and test procedures that would address observed safety risks associated with submersion of REESS and high voltage components in water.

(3) Emergency response information to assist first and second responders

In 2020, the National Transportation Safety Board (NTSB) released a report, Safety Risks to Emergency Responders from Lithium-Ion Battery Fires in Electric Vehicles, which strongly recommended that electric vehicle manufacturers provide standardized, vehicle-specific emergency response information for EVs.

The NHTSA’s proposed FMVSS No. 305a would make the NTSB’s recommendation a requirement. All electric vehicle manufacturers would be required to provide rescue sheets and ERGs directly to the NHTSA in a format consistent with ISO-17840 Road vehicles - Information for first and second responders. The NHTSA would host these ERGs and rescue sheets in a centralized location accessible to responders on its website. Additionally, NHTSA would like to migrate the ERGs currently on the National Fire Protection Association’s (NFPA’s) website to NHTSA's website.

Other safety requirements discussed in the NPRM include post-crash integrity tests; external short circuit, overcharge, over-discharge, overcurrent, and high operating temperature tests; warning in the event of operational failure of REESS vehicle controls; and more.

Visit the published NPRM in the Federal Register to learn more and to post comments. The comment period closes on Friday, June 14, 2024.

(Sources: Federal Register, NHTSA, NTSB, NFPA, UNECE, SAE International, ISO)

Responding to incidents involving individuals with autism

April is Autism Acceptance Month. Throughout April, the Department of Health and Human Services (HHS), Interagency Autism Coordinating Committee (IACC) and many national and international advocacy groups have been honoring the contributions and recognizing the needs of people on the autism spectrum.

Autism awareness is essential for all members of the community, but it is especially important for first responders. People with autism may have difficulty understanding and interpreting social cues, exhibit sensory overwhelm and sensitivities, and have unique ways of processing information. People with autism also have higher-than-average mortality rates, often from accidental death such as drowning or being hit by a car, or from medical causes, in particular epilepsy.

The 2024 Fire Department Instructor’s Conference (FDIC) International, which just wrapped up last week, featured a classroom session, Autism Awareness for First Responders. The Journal of Emergency Medical Services (JEMS) previewed this classroom session in March. The article provides tips on communication, performing a medical or trauma assessment on a patient with autism, and awareness information on wandering. Wandering, or elopement, among the autism community is of particular concern for first responders.

Additionally, the White House’s proclamation of April 2, 2024, as Autism Acceptance Day, highlighted the reauthorization of Kevin and Avonte’s Law, which was so named to honor the memory of Kevin Wills and Avonte Oquendo, two boys with autism who tragically perished after wandering away from supervised settings. This law will allow for the expansion of training for first responders and caregivers.

Kevin and Avonte’s Law provides the foundation for the International Association of Chiefs of Police (IACP) Home Safe program, which released a suite of resources in September 2023 for first responders:

• Understanding Children on the Autism Spectrum: A Guide for First Responders.
• Children on the Autism Spectrum: Search Protocols and Questionnaire for First Responders.
• Tips for Caregivers Supporting Children on the Autism Spectrum.

Emergency response agencies may also want to explore best practices for response to individuals with autism that are being adopted by other agencies. EMS1 recently featured two emergency medical services (EMS) agencies’ best practices. Gold Cross ambulances in Salt Lake City, Utah, introduced specialized kits for paramedics in its ambulances designed to enhance their response to patients with autism. Earlier this year, a Minnesota family with an autistic son developed ‘sensory emergency kits’ for police, fire, and other first responder personnel to help them interact with kids and adults with autism.

These publications can be used by all first responders for training or updating standard operating procedures, guidelines, and plans related to response to incidents involving individuals with autism.

(Sources: FDIC International, JEMS, White House, IACP, EMS1)

CISA webinar series in May: Artificial Intelligence and the Emergency Services Sector

CISA’s Emergency Services Sector Management Team (ES SMT) is hosting a 3-part webinar series in May on artificial intelligence (AI):

• Webinar 1 - Artificial Intelligence and the Emergency Services Sector, Wednesday, May 1, 1-2 p.m. EDT. This webinar will provide an overview of AI and will discuss the development of the Emergency Services Sector (ESS) Artificial Intelligence Working Group (AIWG). ESS subject matter experts will discuss use of AI in emergency services. CISA will roll out its first AI Fact Sheet during this webinar.
• Webinar 2 - Artificial Intelligence and the Emergency Services Sector: Benefits and Challenges, Wednesday, May 8, 1-2 p.m. EDT. With the assistance of AI, first responders can perform their duties more effectively. This webinar will discuss some of the challenges that come with using these tools. CISA will roll out its second AI Fact Sheet during this webinar.
• Webinar 3 - Artificial Intelligence and the Emergency Services Sector: Case Studies, Wednesday, May 15, 1-2 p.m. EDT. The case studies that will be discussed offer current examples, per subsector, of efforts underway in developing AI tools and algorithms that may benefit the ESS. CISA will roll out its third AI Fact Sheet during this webinar.

The webinar series will be hosted on Microsoft Teams. Visit the links above to learn more and register for each of these webinars.

Email the ES SMT at EmergencyServicesSector@cisa.dhs.gov with questions or visit CISA.gov/Emergency-Services-Sector for more information.

(Source: CISA)

Cyber Incident Assistance

MS-ISAC
SOC@cisecurity.org
1-866-787-4722

IdentityTheft.gov

IC3

Cybercrime Support Network

General Information

StopRansomware.gov

CISA's Known Exploited Vulnerabilities Catalog

FTC scam list

CISA alerts

Law Enforcement Cyber Center

TLP Information

CISA: The P25 Steering Committee, the Compliance Assessment Process and Procedures Task Group (CAPPTG), and the Joint SAFECOM-NCSWIC P25 User Needs Working Group (UNWG) release Project 25 Link Layer Encryption Informational Session

Link Layer Encryption (LLE) is a security service that provides confidentiality for user identities, voice, data, supplementary services, and other information sent over the control channel.

On October 11, 2023, a “P25 LLE Informational Session” was held to provide a roadmap for public safety users around the development of the LLE P25 standard, how LLE will work to protect the security of P25 land mobile radio (LMR) systems, and a high-level overview of this emerging technology. It provided a greater understanding of how LLE will work upon completion of the LLE Project 25 (P25) Standard and how it may interface with current P25 land mobile radio (LMR) systems.

CISA has just posted the recording of the P25 LLE Information Session on its YouTube channel.

The P25 LLE Informational Session was led by Telecommunications Industry Association subject matter experts (SME). These SME engineers are members of the APCO Project 25 Interface Committee (APIC) Encryption Task Group (ETG) and are currently developing the LLE P25 standard.

View the session on CISA’s YouTube channel. Learn more at CISA’s website at cisa.gov/safecom/project-25 and cisa.gov/safecom/encryption under the Project 25 menu.

(Source: CISA)

CISA and partners release advisory on Akira ransomware

On April 18, CISA, the Federal Bureau of Investigation (FBI), Europol’s European Cybercrime Centre (EC3), and the Netherlands’ National Cyber Security Centre (NCSC-NL) released a joint Cybersecurity Advisory (CSA), #StopRansomware: Akira Ransomware, to disseminate known Akira ransomware tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) identified through FBI investigations as recently as February 2024.

Evolving from an initial focus on Windows systems to a Linux variant targeting VMware ESXi virtual machines, Akira threat actors began deploying Megazord (a Rust-based code) and Akira (written in C++), including Akira_v2 (also Rust-based) in August 2023. Akira ransomware has impacted a wide range of businesses and critical infrastructure entities in North America, Europe, and Australia and claimed approximately $42 million (USD) in ransomware proceeds.

CISA and partners encourage critical infrastructure organizations to review and implement the mitigations provided in the joint CSA to reduce the likelihood and impact of Akira and other ransomware incidents. For more information, see CISA’s #StopRansomware webpage and the updated #StopRansomware Guide.

(Source: CISA)

Russian hackers claim cyberattack on Indiana water plant

A Russia-linked hacker group has claimed responsibility for a cyberattack on a water and wastewater treatment plant in Indiana. The threat actor known as the Cyber Army of Russia posted a video on its Telegram channel over the weekend showing how the hackers allegedly interacted with the systems of the Tipton Wastewater Treatment Plant.

The group hasn’t published any other details about the hack, but an Indiana official told CNN that the plant had indeed been a victim of a cyberattack on Friday evening, “prompting plant managers to send maintenance personnel to investigate the suspicious activity.”

The general manager of Tipton Municipal Utilities (TMU), Jim Ankrum, said in a comment to CNN that the facility was targeted but hasn’t been compromised. According to Mandiant, the Cyber Army of Russia poses as a hacktivist collective, but in reality has a close operational relationship with Sandworm.

(Source: The Record)

911 service provider Lumen blames 911 outage on installation of light pole

The outage of 911 systems in several states Wednesday evening (April 17) was caused by the installation of a light pole, according to Lumen, a company that supports some of those systems.

“On April 17, some customers in Nevada, South Dakota and Nebraska experienced an outage due to a third-party company installing a light pole – unrelated to our services,” Lumen Global Issues Director Mark Molzen told CNN on Thursday morning. While the department initially said it had no timeline for restoring service, the interruption had been resolved within about two hours.

While Lumen’s statement indicated the cause of the outage was not malicious, the service interruptions raise questions about the fragility of the nation’s 911 infrastructure.

(Source: CNN)

The InfoGram is distributed weekly to provide members of the Emergency Services Sector with information concerning the protection of their critical infrastructures.

Fair Use Notice:
This InfoGram may contain copyrighted material that was not specifically authorized by the copyright owner. The EMR-ISAC believes this constitutes “fair use” of copyrighted material as provided for in section 107 of the U.S. Copyright Law. If you wish to use copyrighted material contained within this document for your own purposes that go beyond “fair use,” you must obtain permission from the copyright owner.

Linking Policy and Disclaimer of Endorsement:
The appearance of external hyperlinks does not constitute endorsement of the linked websites, or the information, products or services contained therein. We provide these links and pointers solely for your information and convenience. When you select a link to an outside website, remember that you are subject to the privacy and security policies of the owners/sponsors of the outside website. To view information and resources on the policies that govern FEMA web content visit FEMA Website Information.

Section 504 Notice:
Section 504 of the Rehabilitation Act requires that FEMA grantees provide access to information for people with disabilities. If you need assistance accessing information or have any concerns about access, please contact FEMAWebTeam@fema.dhs.gov.