On 2 September 2025, the Widespread Information Management for the Welfare of Infrastructure and Government Bill (HB 5079) was introduced in the House of Representatives to reauthorise the Cybersecurity Act of 2015, extending its effective period to 2035. The Bill introduces statutory definitions for artificial intelligence, critical infrastructure, and Sector Risk Management Agencies, and mandates that Federal procedures for sharing cyber threat indicators and defensive measures be developed, updated, and disseminated rapidly to State, local, Tribal, and territorial governments and non-Federal critical infrastructure. It authorises Federal technical assistance on a voluntary basis, including one-time classified read-ins for critical infrastructure operators, and clarifies that artificial intelligence developed or strictly deployed for cybersecurity may be utilised in Federal technical capabilities and outreach activities. The Bill further directs the Secretary of Homeland Security to implement an ongoing outreach plan within 90 days of enactment to ensure awareness and participation of Federal and non-Federal entities, including small or rural operators, with annual briefings to Congress on implementation. It expands reporting requirements to include ransomware and prepositioning activities in biennial updates, and through conforming amendments to the Homeland Security Act of 2002, broadens the definition of cybersecurity threats to cover vulnerabilities in critical and emerging technologies such as artificial intelligence, operational technology, edge devices, and internet-of-things systems.
Original source