Information sharing law enters uncertain period without reauthorization.

The Cybersecurity Information Sharing Act faces expiration at the end of September 2025 due to a sunset clause, as Congress has not yet reauthorized it amid competing priorities like the debt ceiling debate. The law encourages companies to report cyber threats without liability concerns and facilitates sharing between agencies and private sector organizations to identify broader attack patterns. Experts expect eventual renewal, likely retroactively, though the timing remains uncertain and could leave threat information sharing in legal limbo for weeks or months.

Read more:

https://www.securityweek.com/the-cybersecurity-information-sharing-act-faces-expiration/