Congress Extends Cyber Info Sharing Law Amid Rising Cyber Threats

On September 1, 2026, Congress passed a continuing resolution extending the Cybersecurity Information Sharing Act (CISA) of 2015 through December 11, 2026. This extension comes as industry groups express concern over recent cyber attacks on critical infrastructure, particularly water systems, and the rapid advancements in artificial intelligence. The law facilitates information sharing between private companies and government agencies, providing liability protections for firms that disclose cyber threats. Despite bipartisan support, efforts for a long-term reauthorization have stalled due to opposition from Senate Homeland Security Committee Chairman Rand Paul, who raises free speech concerns. The Operational Technology Cybersecurity Coalition emphasized the need for a stable legal framework to enhance public-private collaboration in cybersecurity. The extension is seen as a temporary relief for organizations fearing another lapse in the law's authority.

Key Points: • CISA 2015 extended through December 11, 2026, amid rising cyber threats. • Industry groups warn that lapsing the law could hinder critical infrastructure security. • Senator Rand Paul's opposition continues to delay long-term reauthorization efforts.