More than a year after permanent authority under the Cybersecurity Information Sharing Act of 2015 expired at the end of fiscal 2025, a long-term reauthorisation remains blocked in the Senate, with the program surviving only on short-term renewals inside continuing resolutions — leaving liability protections for companies sharing cyber-threat indicators hostage to government-funding fights. Senate Homeland Security Chairman Rand Paul is the impediment, holding out for an amendment he says would bar government pressure on social-media platforms; ranking member Gary Peters, sponsor of bipartisan bills extending the program through fiscal 2035, says Paul "has not allowed any kind of long-term extension to be put forward." A unanimously advanced House bill would also extend to 2035 but has not reached the floor, and with a crowded post-midterm calendar action may fall to the 120th Congress. Cyber Threat Alliance's Michael Daniel says sharing continues but the program's uncertain status is deterring new participants, and urges updating the statute for AI-era concerns such as distillation attacks.

• Source article