Key Cybersecurity Statute Expires

The Cybersecurity and Information Sharing Act (CISA) of 2015 expired when Congress failed to reach an agreement to extend it. CISA encouraged companies to share cyber threat information—and provided liability protections for information sharing. The law was a cornerstone of our nation’s cybersecurity and enabled threat information to be shared rapidly before attacks could spread. It is possible that the law will be reinstated and extended as part of legislation to end the current government shutdown.

Thank you for reading. We share more cybersecurity and tech policy news below, along with a featured podcast.

This Week in Washington

  • NextGov: Lawmakers failed to agree on a government spending bill, plunging the federal government into a shutdown. The shutdown will pause most IT modernization efforts, stalling or throwing off cyber project implementation timelines, and potentially leave federal government systems more vulnerable to cyberattacks.
     
  • StateScoop: As part of its efforts to centralize national cybersecurity efforts, the Cybersecurity and Infrastructure Security Agency (CISA) has ended its support of the Multi-State Information Sharing and Analysis Center. CISA will continue to support state-level cybersecurity efforts through the State and Local Cybersecurity Grant Program.
     
  • POLITICO: The Commerce Department has pulled billions of dollars from Natcast and its National Semiconductor Technology Center (NSTC) in recent months, accusing the semiconductor program, funded by the 2022 CHIPS and Science Act, of partisan bias. Politico’s investigation dives deep into the decision-making behind the rollback and its implications for the semiconductor industry.  
     
  • NextGov: The Federal Emergency Management Agency (FEMA) and U.S. Customs and Border Protection (CBP) were compromised by a major cyberattack over the summer, which led to the firing of FEMA IT staff. The attack originated from stolen login credentials and resulted in the theft of employee data from both agencies. 

Article Summary

  • POLITICO: California Governor Gavin Newsom officially signed SB 53, a landmark AI bill, into law. The bill contains AI safety and reporting rules, among other provisions. 
      
  • NBC San Diego: Chula Vista, California, has implemented an AI tool to revolutionize police reporting. The tool, which will be linked to officers’ body cameras, will provide live transcriptions and reports of police interactions, including translations.  
     
  • Wisconsin Public Radio: ConnectSuperior, a new broadband network in Superior, Wisconsin, has been a large success in the city, hitting its year-end goal of 10% usage in just two months. The city-owned fiber optic network provides access to high-speed internet for households and businesses. 
     
  • Forbes: A former National Guard member was arrested in Tulsa on charges of attempting to provide material support to Al-Qaida. The arrest follows a new report that found the terrorist group is using cyberspace for recruitment and increasing its cyberattack attempts.  

Featured Podcast

  • Microsoft Threat Intelligence Podcast
    Domain impersonation and typosquatting cyberattacks are on the rise. In the face of these growing threats, Microsoft has rolled out new detection technology that may give defenders the upper hand. Kelly Bissell, Corporate Vice President of Microsoft, joins the Microsoft Threat Intelligence Podcast to discuss these innovations and more. (Stopping Domain Impersonation with AI – September 24, 2025 – 24 minute and 56 second listen)

Note: Voices for Innovation regularly shares a range of opinion articles and press releases from organizations in and publications covering tech policy. These pieces are meant to educate our audience, not to endorse specific platforms or bills.