FEMA major disaster declared for CNMI; CISA flags ConnectWise and Windows zero-days; Southern wildfires push the South to PL 4

Today’s brief covers the published Presidential major disaster declaration for the Commonwealth of the Northern Mariana Islands following Super Typhoon Sinlaku, the FEMA Alaska recovery update on Typhoon Halong, and CISA’s addition of two actively exploited vulnerabilities (ConnectWise ScreenConnect and Microsoft Windows Shell) to the Known Exploited Vulnerabilities catalog. Wildfire activity in southern Georgia and northern Florida continues to drive Southern Area resourcing at PL 4, and critical fire weather is in place across eastern New Mexico, far western Texas, and the southern High Plains. Tornado damage assessments continue in Tennessee and Illinois, Michigan expanded its flooding state of emergency to 41 counties, and a M4.4 earthquake near Alamo, Nevada produced felt reports into Las Vegas. EM Morning Brief is your concise daily update on national and state-by-state emergency management news. Produced by Sitch Radio, an EOC Voices podcast.Key Takeaways• CNMI major disaster declared: FEMA-4910-DR for Super Typhoon Sinlaku was published in the Federal Register yesterday; covers incident period April 11 to April 18, 2026.• CISA KEV update: Two actively exploited vulnerabilities added: ConnectWise ScreenConnect (CVE-2024-1708) and Microsoft Windows Shell spoofing (CVE-2026-32202). Federal remediation deadline May 12, 2026.• Southern wildfires: Brantley Highway 82 Fire in Georgia at 32 percent containment with 80 plus homes destroyed; Clinch and Echols fire at 23 percent containment over 50 plus square miles; Florida Gun Range and Sand Drain fires under continued USFS warning.• Critical fire weather: Red Flag and Critical Fire Weather conditions today for eastern New Mexico, far western Texas, southern High Plains, and portions of eastern Colorado.• Texas disaster declaration: Governor Abbott declared disaster for Lamar, Parker, and Wise counties; TDEM mobilized swiftwater rescue and debris teams; Mineral Wells continues recovery from Tuesday’s EF3 tornado.• Michigan emergency expanded: Whitmer added Tuscola County and the Village of Holly to the existing flooding state of emergency; 41 counties and three municipalities now covered.SponsorsThe NIMS Store - https://thenimsstore.com/SourcesCISA• CISA KEV catalog (April 29, 2026), ConnectWise ScreenConnect and Windows flaws added: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?utm_source=em-morning-brief• Security Affairs, CISA adds Microsoft Windows Shell and ConnectWise ScreenConnect flaws to KEV: https://securityaffairs.com/191442/security/u-s-cisa-adds-microsoft-windows-shell-and-connectwise-screenconnect-flaws-to-its-known-exploited-vulnerabilities-catalog.html?utm_source=em-morning-brief• Cybersecurity Dive, CISA adds Microsoft and ConnectWise vulnerabilities to active exploitation catalog: https://www.cybersecuritydive.com/news/cisa-microsoft-connectwise-kev-update/818817/?utm_source=em-morning-briefNIFC and InciWeb• NIFC IMSR (April 29, 2026, 0730 MDT), national fire situation report: https://www.nifc.gov/nicc-files/sitreprt.pdf?utm_source=em-morning-brief• InciWeb, Gun Range Fire (Florida), incident page: https://inciweb.wildfire.gov/incident-information/flfnf-gun-range?utm_source=em-morning-brief• InciWeb, Sand Drain Fire (Florida), incident page: https://inciweb.wildfire.gov/incident-information/flfnf-sand-drain?utm_source=em-morning-briefFEMA• Federal Register, Presidential major disaster declaration for CNMI (DR-4910), Super Typhoon Sinlaku, published April 29, 2026: https://www.federalregister.gov/documents/2026/04/29/2026-08343/presidential-declaration-of-a-major-disaster-for-the-commonwealth-o