The nation holds at Preparedness Level 5 with 85 large fires burning, and Oregon and Washington are officially in their worst fire season since at least 2000, with more than 10,000 Oregonians under evacuation. CISA urges water and wastewater utilities to lock down programmable logic controllers after attacks that caused boil water notices and manual operations, following cyber activity that affected more than 30 Minnesota water systems. Deadly flash flooding strikes New Jersey and New York’s Capital Region, Frankston, Texas issues a citywide boil water advisory, and Wisconsin storm survivors have one month left to apply for FEMA assistance. EM Morning Brief is your concise daily update on national and state-by-state emergency management news. Produced by Sitch Radio, an EOC Voices podcast.

Key Takeaways

• Wildfire: The nation remains at Preparedness Level 5 with 85 large fires. Oregon and Washington are in their worst fire season since at least 2000, with 43 uncontained large fires in the Northwest geographic area.

• Oregon: More than 10,000 residents are under some level of evacuation. A 24/7 statewide wildfire hotline is active at 1-833-699-0554, and a fire weather watch takes effect Saturday for much of central and eastern Oregon.

• Water sector cyber: CISA urges utilities to disconnect PLCs from direct internet access, change default passwords, and allowlist remote connections after attacks caused boil water notices and sustained manual operations.

• Minnesota: More than 30 community water systems were affected by malicious cyber activity. No water supply has been reported compromised, and attribution remains unconfirmed.

• Northeast flooding: A child died in the Passaic River in New Jersey, and nearly a foot of rain fell in parts of New York’s Capital Region, where the State EOC is activated and swiftwater teams are deployed.

• Washington: New Level 3 evacuations are in effect on the Sinlahekin Fire in Okanogan County. The Kaiser Canyon Fire stands at 128,212 acres and 27 percent containment.

• Deadlines: Wisconsin survivors of the April storms and flooding have until August 31 to apply for FEMA Individual Assistance and SBA disaster loans.

• Cyber vulnerability: The newest Known Exploited Vulnerabilities entry, a hard-coded password flaw in Cisco Secure Firewall Management Center, carries a remediation due date of August 1.

Sponsors

The NIMS Store - https://thenimsstore.com/

Descript, Edit video by editing text - https://link.bcolburn.com/DB-Descript

ESET, Cyber Security Progress. Protected. - https://refer.eset.com/hip7r

Sources

National Wildfire

• NIFC National Fire News: national preparedness level, fire counts, personnel, and Northwest situation

• InciWeb incident list: current large fire acreage and update times

CISA and Cyber

• CISA Alert, July 30: water and wastewater sector urged to protect OT against activity targeting PLCs

• CISA ICS Advisories: industrial control systems advisories released July 30

• CISA Known Exploited Vulnerabilities Catalog: Cisco Secure Firewall Management Center entry added July 29, due August 1

DHS

• National Terrorism Advisory System: no current advisories

FEMA

• FEMA Disaster Declarations: no new declarations in the past 24 hours

Weather and Hazards

• WPC Short Range Forecast Discussion: heavy rain, severe storm, and heat outlook

• SPC Day 1 Convective Outlook: Slight Risk for the Ozarks and mid-Mississippi Valley

• National Hurricane Center: Tropical Storm Genevieve weakening, Atlantic quiet

USGS Volcanoes

• USGS Volcano Updates: Kilauea, Great Sitkin, and Ahyi Seamount status

Travel Advisories

• State Department Travel Advisories: full advisory list with update dates

• Bangladesh Travel Advisory: Level 2, exercise increased caution, updated July 30

Colorado

• InciWeb, Aspen Acres Fire: acreage and location

• Montrose Daily Press: US 550 closed between Ouray and Silverton for mudslide cleanup

Minnesota

• CBS News: investigation into cyber activity affecting more than 30 Minnesota water systems

New Jersey

• AP via Bangor Daily News: Passaic River drowning and Paterson water rescues

New York

• Mid Hudson News: Putnam Valley 30-day state of emergency and road closures

• CNN via KRDO: Capital Region rainfall totals, rescues, and state response

Oregon

• KLCC and OPB: statewide acreage, evacuations, wildfire hotline, and fire weather watch

• Central Oregon Fire Info: Bench Fire evacuation levels and structural protection

• KPTV FOX 12: worst season since 2000, Bench Fire structure losses, Rowe Creek evacuation upgrades

• InciWeb, Rowe Creek Complex: acreage and update time

• InciWeb, Big Grass Fire: acreage and update time

• InciWeb, 2026 Coleman Creek: acreage and update time

Texas

• KLTV: Frankston citywide boil water advisory

Utah

• InciWeb, Babylon Fire: acreage and location

Washington

• InciWeb, Kaiser Canyon Fire: acreage and update time

• KPQ News Radio: Sinlahekin Fire Level 3 evacuations near Tonasket and Loomis

• InciWeb, Little Giant Fire: acreage and containment

Wisconsin

• Wisconsin Emergency Management: August 31 deadline for FEMA Individual Assistance and SBA loans

Northern Mariana Islands

• USGS Volcano Updates: Ahyi Seamount status and restored monitoring data streams

Good morning.

The national wildfire picture remains at preparedness level 5, the highest tier.

The National Interagency Fire center reports 85 large fires burning across the country, with nine new large incidents and more than 2.8 million acres involved in active fires.

More than 27,000 firefighters and support personnel are committed nationally.

The Northwest geographic area also remains at preparedness level 5, with 43 uncontained large fires in Oregon and Washington and 20 complex incident management teams assigned.

Official NIFC update published about 24 hours ago in Cyber CISA urges the water and wastewater sector to protect operational technology after threat actors targeting Internet exposed programmable logic controllers, changed passwords to lockout operators and altered device IP addresses.

The agency says this activity has resulted in boil water notices and sustained manual operations, and it recommends disconnecting PLCs from direct Internet access, enabling password protection and allow listing remote connections.

The alert, prepared with contributions from EPA and the FBI, follows malicious cyber activity that affected technology at more than 30 community water systems in Minnesota.

CISA also releases 11 new industrial control Systems advisories covering products from vendors including Mitsubishi Electric Rock, Rockwell Automation and Schneider Electric.

The most recent addition to the known Exploited Vulnerabilities catalog.

A hard coded password flaw in Cisco Secure Firewall Management center carries a remediation due date of August 1st.

Official Kev update published about 48 hours ago.

On the weather side, the Storm Prediction center places parts of the Ozarks and mid Mississippi Valley under a slight risk of severe thunderstorms today with damaging gusts and hail.

The main threats and the Weather Prediction center highlights a slight risk of excessive rainfall from the upper Midwest into the Ohio Valley.

Dangerous heat continues across the Southwest with highs of 110 to 120 degrees and widespread major to extreme heat risk across much of the West.

In the Eastern Pacific, Tropical Storm Genevieve continues to weaken far from land and the Atlantic remains quiet.

There are no current National Terrorism Advisory System advisories.

FEMA records show no new disaster declarations in the past 24 hours and the State Department updated its Bangladesh Travel Advisory to Level 2 Exercise increased caution on July 30th.

Let's run through the states.

Colorado the Aspen Acres Fire northwest of rye stands at 101,961 acres and 66% containment in the Southwest US 550 between Ouray and Silverton remains closed into Friday as crews clear at least eight mud and rock slide areas left by flash flooding off the Gold Mountain fire burn scar earlier in the week.

Hawaii Kilauea's summit eruption in Halemaumau is paused and the volcano sits at advisory alert level with aviation color code yellow after episode 52 ended early Wednesday.

The Hawaiian Volcano Observatory reports reinflation at the summit and says another eruptive episode is likely.

Federal investigators continue working the malicious cyber activity that affected technology at more than 30 community water systems across the state, forcing some utilities to manual operations.

State officials report no compromise of any water supply and affected cities including South St. Paul River, Bram and Plymouth have restored normal or near normal operations.

Attribution remains unconfirmed.

The activity is the backdrop for CISA's National Water Sector Alert.

New Jersey a 10 year old boy died in the rain swollen Passaic river in the city of Passaic after pushing his sister to safety and a search continues for a second child in neighboring Paterson.

Firefighters rescued about 20 people trapped by rising floodwater.

Several North Jersey locations recorded a full July's worth of rain.

NEW York Nearly a foot of rain fell in parts of Columbia and Rensselaer counties in the 48 hours ending Thursday morning, driving water rescues and widespread road closures across the capital region.

The state Emergency Operations center is activated and state swiftwater rescue teams are deployed in the Hudson Valley.

Putnam Valley declared a 30 day state of emergency Wednesday evening after up to 4 inches of rain closed numerous roads and bridges, with travel prohibited on six local roads for five days.

Oregon Oregon remains the center of the national firefight with more than 1.8 million acres burning, roughly 12,000 firefighters assigned and more than 10,000 residents under some level of evacuation.

The Row Creek complex near Fossil stands at roughly 305,000 acres and 42% containment after evacuation levels were raised on its southern end.

The Big Grass Fire near the Idaho border is at about 303,000 acres and 15% containment and the Coleman Creek fire near Juntura holds at more than 180,000 acres with no containment.

The Bench Fire near Warm springs at about 64,400 acres and 22% contained, has destroyed eight homes and five other buildings.

The northeast corner of Camp Sherman is under a Level three Go now order, and the Confederated Tribes of Warm Springs ask residents south of Shittike Creek to conserve water while firefighting draws keep tanks at critical levels.

Texas the city of Frankston places all water customers under a boil water advisory until further notice due to a potential safety risk during a water system upgrade.

The city expects to lift the advisory Friday, possibly as late as Monday.

Utah the Babylon Fire southwest of Monticello reaches 107,189 acres and 95% containment as crews move toward full control.

Washington the Kaiser Canyon Fire in the Nespelum and Okanogan area stands at 128,212 acres and 27% containment.

The Sinlahaken Fire in Okanogan county grows to 10,527 acres with no containment and new Level 3 evacuation notices cover homes near Blue and Fish Lakes and along Lamansky, Sinlahecan and Stadler roads.

In Chelin county, the Little Giant Fire holds at about 25,000 acres with no containment.

Wisconsin One month remains for survivors of the April 13 to 23 storms and flooding to apply for FEMA individual assistance and SBA disaster loans.

The deadline is Aug. 31.

More than $44.1 million has gone to 16,391 survivors across 19 counties in the Oneida Nation.

All other states have no significant updates in the last 24 hours.

Let's check in on the territories.

Northern Mariana Islands the AJI Seamount remains at advisory alert level with aviation color code yellow.

The USGS reports no underwater plumes over the past week and confirms that geophysical monitoring data streams interrupted by Typhoon Bavi have been restored.

All other territories in the District of Colombia have no significant updates in the last 24 hours.

That wraps today's EM Morning Brief.

New episodes drop Monday through Friday in the 5am hour PT, so the day starts with clarity instead of catch up.

Subscribe on the Emergency Management Network on Substack or follow on your favorite podcast player.

EM Morning Brief is an EOC Voices podcast.

Stay safe.