Mississippi tornado emergency hits Brookhaven and Franklin County; CISA adds PAN-OS RCE to KEV

On today’s brief: search and rescue is underway across central and southwest Mississippi after a Wednesday-evening tornado emergency for Brookhaven, Bude, and Bogue Chitto, with the governor coordinating state response. CISA adds CVE-2026-0300 in Palo Alto Networks PAN-OS to the Known Exploited Vulnerabilities catalog. FEMA’s Public Assistance application deadline lands today for Washington local governments and private nonprofits affected by the December 2025 storms. NIFC’s May 6 IMSR shows 17 large fires nationally, including the Cow Creek Fire in Florida and the Hog Farm Fire in Oklahoma. The U.S. Geological Survey reports Episode 46 of the Halemaumau eruption at Kilauea has ended and the alert level is lowered to Advisory. State updates cover Alabama, California, Colorado, Florida, Hawaii, Louisiana, Michigan, Mississippi, Nevada, Oklahoma, and Washington. EM Morning Brief is your concise daily update on national and state-by-state emergency management news. Produced by Sitch Radio, an EOC Voices podcast.Key Takeaways• Mississippi tornado emergency: Confirmed large tornadoes hit Brookhaven, Bude, Meadville, and Franklin County Wednesday evening with destroyed homes, trapped residents, and 19,000-plus power outages; MEMA is coordinating search and rescue with locals.• CISA KEV addition: CVE-2026-0300 (Palo Alto Networks PAN-OS, User-ID Auth Portal) added May 6 with active exploitation and unauth root RCE risk; federal civilian agencies must remediate per BOD 22-01.• Washington FEMA deadline (today): May 7 is the last day for Washington local governments and private nonprofits to apply for FEMA Public Assistance under DR-4906 for the December 2025 storms.• Kilauea Episode 46 ends: HVO lowered the Volcano Alert Level to Advisory and aviation color code to Yellow after lava fountaining ended at 5:22 p.m. HST May 5; tephra fell along Highway 11 outside the closed park area.• NIFC posture: 17 large fires being suppressed nationally; the Cow Creek Fire (Florida) is near 50% contained at about 2,400 acres, and the Hog Farm Fire (Oklahoma) is 30% contained at 500 acres with residences threatened.• Front Range snowstorm: Up to 52,000 customers without power across the Colorado Front Range Wednesday; Estes Park reported 30-plus inches; DIA had 35 cancellations and more than 440 delays.• Iranian APT activity (CISA AA26-097A): Operators of internet-facing Rockwell Automation/Allen-Bradley PLCs in water, energy, and government sectors should review the joint advisory and apply mitigations.• Higher-ed cyber incidents: San Diego Community College District continues recovery from a sophisticated cyberattack; Instructure (Canvas) confirms a breach with ShinyHunters claiming 3.65 TB of data exposure across thousands of institutions.• Nevada aftershocks: The April 13 M5.7 Silver Springs sequence remains active with M4.95 near Fallon and M4.8 near Yerington; expect ongoing felt aftershocks for weeks.• Michigan boil water advisory: Precautionary advisory in parts of Rochester Hills and Oakland Township after a pressure drop below 20 PSI; boil for one minute or use bottled water until samples clear.SponsorsThe NIMS Store - https://thenimsstore.com/SourcesCISA• CISA KEV add (May 6, 2026): CISA adds CVE-2026-0300 (Palo Alto Networks PAN-OS) to the Known Exploited Vulnerabilities catalog• CISA Known Exploited Vulnerabilities Catalog: Living catalog and BOD 22-01 remediation requirements for federal civilian agencies• CISA AA26-097A: Joint advisory on Iranian-affiliated APT activity targeting Rockwell Automation/Allen-Bradley PLCs across U.S. critical infrastructureFEMA• FEMA news release (May 6, 2026): May 7 deadline for Washington local governments and private nonprofits to apply for FEMA Public Assistance• FEMA disaster page DR-4906: Washington Severe Storms, Straight-line Winds, Flooding, Landslides, and Mudslides• Federal Register (May 6, 2026): Notices of Emergency and Major Disaster Declarations and Related AmendmentsNIFC and Wildland Fire• NIFC IMSR (May 6, 2026): National Incident Management Situation Report, 17 large fires, 1 new, 1.88M acres YTD• NIFC National Fire News: Daily incident summaries and resource postureUSGS• USGS HVO notice (May 5, 2026): Episode 46 of the Halemaumau eruption ends; alert lowered to Advisory and aviation code to Yellow• USGS Kilauea Volcano Updates: Hawaiian Volcano Observatory updates and noticesNOAA, NWS, and SPC• SPC Day 2 Convective Outlook (May 6, 2026): Storm Prediction Center forecast covering severe risk across the Mississippi and Tennessee Valleys• NWS Active Alerts: National Weather Service active warnings, watches, and advisories• NHC Atlantic Tropical Outlook: Routine outlooks resume May 15 ahead of the June 1 Atlantic season startAlabama• Alabama EMA: Severe Threat Continues into Thursday, all-modes posture• NWS Birmingham: Forecast office serving central AlabamaCalifornia• CAL FIRE General Fire incident page: Four-fire complex on May 6, evacuations later lifted• Office of Governor Newsom: Wildfire Preparedness Week proclamation, May 3 to 9, 2026• Times of San Diego: San Diego Community College District cyberattack responseColorado• CPR News (May 6, 2026): Spring snowstorm brings slick roads and Front Range power outages• 9News (May 6, 2026): Thousands without power as wet snow downs trees and linesFlorida• Levy County Cow Creek Fire update: 352today report on Cow Creek Fire growth, road closures, and evacuations• Chronicle Online: Cow Creek Fire reaches roughly 2,400 acres with improving containmentHawaii• USGS HVO notice (May 5, 2026): Episode 46 ends at...