Loading story…
A bipartisan U.S. Senate bill, the Enhancing K-12 Cybersecurity Act, would expand federal cybersecurity support for schools by establishing a Cybersecurity Information Exchange and a Cybersecurity Incident Registry under CISA. Sponsored by Sens. Mark Warner and Marsha Blackburn, the proposal would provide $20 million over two years to help K-12 institutions access training, tools, best practices, funding information, and other protective services.
The legislation is aimed at a sector that faces frequent ransomware and other cyberattacks while operating with limited security resources. Supporters in the education community said the measure would improve coordination, track incidents across schools, identify prevention and response trends, better protect student data, and reduce operational disruptions caused by cyber incidents.
See the actors and campaigns active against you right now.
1 event from the most recent confirmed update back to the earliest known activity.
A bipartisan U.S. Senate bill, the Enhancing K-12 Cybersecurity Act, was introduced by Senators Mark Warner and Marsha Blackburn to expand cybersecurity support for K-12 schools. The proposal would provide $20 million over two years and create a Cybersecurity Information Exchange and Cybersecurity Incident Registry under CISA-related support structures.
See the adversaries and campaigns active against your sector right now, ranked by what they're exploiting.
2 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourcestatescoop.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The U.S. Senate Health, Education, and Labor (HELP) Committee advanced the bipartisan **Health Care Cybersecurity and Resiliency Act**, legislation aimed at revamping cybersecurity practices at the Department of Health and Human Services (**HHS**). The bill would require the HHS Secretary to develop a comprehensive **cybersecurity incident response plan** and submit it to Congress for review, and it would direct HHS to coordinate with **CISA** on oversight of cybersecurity across the public health and healthcare sectors. Additional provisions include developing cybersecurity guidance for **rural healthcare providers** and initiatives to improve **cybersecurity literacy** across the healthcare workforce. Lawmakers cited the **2024 Change Healthcare** incident as a key catalyst, arguing it demonstrated the sector’s exposure to ransomware and other cyber threats and the systemic risk created by concentrated third-party dependencies. The measure would also designate HHS’ *Administration for Strategic Preparedness and Response* (**ASPR**) as the **Sector Risk Management Agency** for the Healthcare and Public Health sectors. CyberScoop reported the bill passed committee on a **22–1** vote, with Sen. Rand Paul as the lone dissenter, and sponsors including Sen. Bill Cassidy along with Sens. Maggie Hassan, Mark Warner, and John Cornyn.
Jun 29, 2026
A DHS “minibus” appropriations package would direct the Cybersecurity and Infrastructure Security Agency (**CISA**) to maintain “sufficient” staffing to execute its statutory missions, including support to federal civilian agencies and state/local/tribal/territorial partners. The accompanying congressional language also calls for maintaining at least **10 regional field offices** and having at least **one Cyber Security Advisor per state or territory**, while continuing to fund election security activities (including regional election security advisers and the Elections Infrastructure ISAC). The bill would provide **$2.6B for CISA**, down from roughly $3B previously cited in the reporting. The same funding package would extend authorization for the **Technology Modernization Fund (TMF)**—which had lapsed—through **Sept. 30** (end of FY2026), enabling continued federal IT modernization investments that are often tied to cyber risk reduction. It would also extend several cybersecurity-related statutory authorities, including the **Cybersecurity Information Sharing Act of 2015**, preserving a legal framework for private-sector sharing of cyber threat intelligence with U.S. government entities under specified liability protections. Separately, CISA leadership turmoil was reported as internal pushback halted an attempted management-directed reassignment of CISA CIO **Robert Costello**, adding to concerns about decision-making and stability amid ongoing pressure from persistent threats to federal networks and critical infrastructure.
Jun 29, 2026
U.S. lawmakers and agencies are advancing multiple efforts to sustain and strengthen cybersecurity capabilities, with some federal authorities at risk of lapsing if Congress fails to avert a government shutdown. Nextgov/FCW reported that the **Cybersecurity Information Sharing Act of 2015**—which provides liability protections to enable private-sector sharing of threat intelligence with the government—and the **National Cybersecurity Protection System** (a federal civilian network intrusion-detection and prevention capability) were both tied to Department of Homeland Security funding legislation and faced imminent expiration absent reauthorization. The same DHS legislative vehicle was also described as key to reauthorizing the **State and Local Cybersecurity Grant Program**, which has provided **$1B** to improve cybersecurity at state and local entities. In parallel, Congress is considering sector-specific measures to improve resilience in energy and utility environments, while the Department of Energy continues operational readiness exercises. Nextgov/FCW highlighted proposed legislation including the **Pipeline Cybersecurity Preparedness Act** (DOE-led programs to improve pipeline/LNG cybersecurity, information sharing, and incident response coordination) and the **Rural and Municipal Utility Cybersecurity Act** (expanding grant and technical assistance for smaller utilities, with **$250M** proposed for FY2026–2030 and protections for sensitive shared cyber information). Separately, Industrial Cyber reported on DOE’s annual **Liberty Eclipse** exercise on Plum Island, which uses an isolated grid environment to train utilities and partners to detect, respond to, and recover from simulated attacks including **ransomware** and stealthy compromise scenarios spanning IT/OT and real-time operations teams.
Jul 12, 2026