Briefs · Weekly brief · Week of 5 Oct 2026 · read on 23 Oct 2026

A large UK Russia package, power inverters on the Covered List page, grid equipment advisories.

On 8 October the UK Sanctions List designated 23 entities and 12 vessels under its Russia regime and amended four entries. The FCC’s Covered List page posted a conditional approval for a line of solar and battery storage power inverters, CISA published advisories on grid equipment and five older vulnerabilities, and CBP added an ACH debit option for maritime fee payments.

  1. 1 ·

    23 entities and 12 vessels on the UK list

    The UK Sanctions List shows 23 entities, 14 of them in Russia and the rest in Kyrgyzstan, China, Canada, Turkey and Thailand, and 12 vessels designated on 8 October under the Russia regime, with three individual entries counted and four entries amended.

    What it touches. Counterparty and vessel screening on trade that touches Russia, including through third countries.

    UK Sanctions List

  2. 2 ·

    A conditional approval for power inverters

    The FCC’s Covered List page posts a conditional approval dated 9 October for one maker’s 1.5 kV solar, 1.5 kV battery energy storage, 2 kV solar and SiC variant power inverters.

    What it touches. Utility scale solar and battery storage equipment.

    FCC Covered List

  3. 3 ·

    Nine ICS advisories, grid equipment among them

    CISA published nine ICS advisories on 6 and 8 October, among them, in the energy sector, a remote terminal unit whose firmware update endpoint has an authentication bypass (ICSA-26-279-06), a protection product that handles IEC 61850 messages (ICSA-26-279-05) and the openPDC and openHistorian software (ICSA-26-281-02).

    What it touches. Grid control and protection equipment.

    CISA ICSA-26-279-06 · CISA ICSA-26-279-05 · CISA ICSA-26-281-02

  4. 4 ·

    Five older vulnerabilities added to the KEV catalog

    CISA added five vulnerabilities on 8 October, carrying CVE numbers from 2015 to 2023, in DNS server software (CVE-2015-5477), a web application framework (CVE-2016-3081), an FTP server (CVE-2015-3306), a document server (CVE-2021-3199) and a content management system (CVE-2023-22894).

    What it touches. Long running server software: name servers, file transfer and older web applications.

    CISA KEV, CVE-2015-5477 · CISA KEV, CVE-2016-3081

  5. 5 ·

    ACH debit for maritime fees, a check on refund changes

    CBP announced a new ACH debit option for maritime fee payments effective 15 October (CSMS 70134132) and an added verification step in the ACE Portal for ACH refund changes from 10 October (CSMS 70162211).

    What it touches. How carriers and importers pay maritime fees and receive refunds through ACE.

    CBP CSMS 70134132 · CBP CSMS 70162211

Read from the public record on 23 October 2026; signed BSJ Ventures.

← All briefs

Open Intel on one thing.

A platform, a piece of equipment, a supplier or a corridor, read from the public record, dated and signed within a business day.