Loading story…
The U.S. House of Representatives has passed legislation to reauthorize the State and Local Cybersecurity Grant Program, extending its funding and support for another decade. The measure, known as the Protecting Information by Local Leaders for Agency Resilience Act (PILLAR Act), aims to provide continued financial assistance to state and local governments to bolster their digital defenses against cyber threats. The program, which had previously lapsed at the end of September, has already distributed $1 billion to local governments and is now set for renewal until 2033, pending Senate approval.
In addition to the grant program reauthorization, the House also overwhelmingly approved the Strengthening Cyber Resilience Against State-Sponsored Threats Act, which will establish an interagency task force led by the FBI and CISA to counter Chinese state-sponsored cyber threats. Lawmakers emphasized the importance of these measures in enhancing national security and equipping local entities with the necessary tools to defend against foreign cyber adversaries. The legislation reflects a bipartisan commitment to strengthening the nation’s cybersecurity posture at all levels of government.
See the reporting duties and controls this puts on the clock.
1 event from the most recent confirmed update back to the earliest known activity.
The U.S. House passed legislation to fully renew the state and local cybersecurity grant program. Multiple outlets reported the House vote as the key development in the program's reauthorization effort.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The National Association of State Chief Information Officers (NASCIO) urged Congress to reauthorize the expired **State and Local Cybersecurity Grant Program** (SLCGP), warning that its lapse undermines state and local cyber operations as other federal support declines. The four-year program expired in September 2025; the bipartisan PILLAR Act, which would have extended it through 2033, passed the House but stalled in the Senate. NASCIO and allied local-government organizations requested $300 million in one-year appropriations, with program rules directing 80% of funding to local-government services. NASCIO cited partial defunding of the Center for Internet Security’s Multi-State Information Sharing and Analysis Center (MS-ISAC) as an additional strain on state and local defenses. The association also called for reauthorization of FirstNet before its statutory authority expires in February 2027, and urged lawmakers to preserve state authority over artificial-intelligence governance rather than broadly preempting state AI laws.
Sep 2, 2026A temporary funding bill will extend the 2015 Cybersecurity Information Sharing Act (CISA) and the State and Local Cybersecurity Grant Program until November 21, 2025. Lawmakers are using the extension to reconcile differences between House and Senate versions of long-term renewals, with debates centering on liability protections and extension duration. Industry and federal officials stress the importance of these laws for threat intelligence sharing and critical infrastructure protection.
Jun 29, 2026
U.S. lawmakers and agencies are advancing multiple efforts to sustain and strengthen cybersecurity capabilities, with some federal authorities at risk of lapsing if Congress fails to avert a government shutdown. Nextgov/FCW reported that the **Cybersecurity Information Sharing Act of 2015**—which provides liability protections to enable private-sector sharing of threat intelligence with the government—and the **National Cybersecurity Protection System** (a federal civilian network intrusion-detection and prevention capability) were both tied to Department of Homeland Security funding legislation and faced imminent expiration absent reauthorization. The same DHS legislative vehicle was also described as key to reauthorizing the **State and Local Cybersecurity Grant Program**, which has provided **$1B** to improve cybersecurity at state and local entities. In parallel, Congress is considering sector-specific measures to improve resilience in energy and utility environments, while the Department of Energy continues operational readiness exercises. Nextgov/FCW highlighted proposed legislation including the **Pipeline Cybersecurity Preparedness Act** (DOE-led programs to improve pipeline/LNG cybersecurity, information sharing, and incident response coordination) and the **Rural and Municipal Utility Cybersecurity Act** (expanding grant and technical assistance for smaller utilities, with **$250M** proposed for FY2026–2030 and protections for sensitive shared cyber information). Separately, Industrial Cyber reported on DOE’s annual **Liberty Eclipse** exercise on Plum Island, which uses an isolated grid environment to train utilities and partners to detect, respond to, and recover from simulated attacks including **ransomware** and stealthy compromise scenarios spanning IT/OT and real-time operations teams.
Jul 12, 2026