Briefs · Weekly brief · Week of 12 Oct 2026 · read on 23 Oct 2026

Gas, logistics and exchange companies on the SDN List; inverters and mobile robots on the Covered List page.

OFAC added eleven entities in Mexico on 13 October, among them gas distribution and transport companies and a logistics company whose entry carries a carrier code, and on 15 October eleven more, ten under its Iran program and a state-owned bank under its Cuba program. The FCC’s Covered List page posted conditional approvals for power inverters and for automated guided vehicles and mobile robots, and CISA added nine exploited vulnerabilities to its catalog, five of them in remote access and network edge products.

  1. 1 ·

    Eleven entities in Mexico on the SDN List

    OFAC added eleven entities in Mexico under its counter terrorism and illicit drugs programs, among them gas distribution and gas transport companies, a logistics company whose entry carries the Standard Carrier Alpha Code TLOJ, and construction and real estate companies, with four individual entries counted.

    What it touches. Carrier vetting by SCAC on cross border trucking, and fuel gas counterparties in Mexico.

    OFAC Recent Actions, 13 October 2026

  2. 2 ·

    Exchange companies, banks and a trading company under the Iran program

    OFAC added ten entities under its Iran program, among them exchange companies and banks in Iran and Iraq, a trading company in Hong Kong and an energy company, and a Cuban state-owned bank under its Cuba program, with sixteen individual entries counted and new and amended general licences issued.

    What it touches. Payment routes and trade finance for goods with an Iran or Cuba nexus.

    OFAC Recent Actions, 15 October 2026

  3. 3 ·

    Conditional approvals for inverters and mobile robots

    The FCC’s Covered List page posts three conditional approvals dated 16 October: automated guided vehicles and autonomous mobile robots, utility scale solar power inverters with bidirectional battery storage inverters, and a series of power inverters.

    What it touches. Warehouse automation and grid connected solar and storage equipment.

    FCC Covered List

  4. 4 ·

    Nine vulnerabilities added to the KEV catalog

    CISA added nine vulnerabilities from 13 to 16 October, among them flaws in a VPN gateway (CVE-2026-104935), a firewall operating system (CVE-2026-0322), remote support software (CVE-2026-102764), an email security gateway (CVE-2026-76519) and backup software (CVE-2026-105134 and CVE-2026-105133).

    What it touches. VPN gateways, firewalls, remote support and backup systems.

    CISA KEV, CVE-2026-104935 · CISA KEV, CVE-2026-0322 · CISA KEV, CVE-2026-102764

  5. 5 ·

    Delays in manifest and in-bond notifications

    CBP’s Cargo Systems Messaging Service published Delays in outbound notifications for Air, Ocean, and Rail Manifest, and In-Bond (CSMS 70208464).

    What it touches. Status messages to carriers and brokers on air, ocean and rail manifests and in-bond moves.

    CBP CSMS 70208464

Describes what the sources published, as read on 23 October 2026; not a verdict on any company; not legal advice.

Read from the public record on 23 October 2026; signed BSJ Ventures.

← All briefs

Next: Open Intel

Open Intel on one thing.

A platform, a piece of equipment, a supplier or a corridor, read from the public record, dated and signed within a business day.

Ask for Open Intel Pre-flight →