Loading story…
The National Association of State Chief Information Officers (NASCIO) urged Congress to reauthorize the expired State and Local Cybersecurity Grant Program (SLCGP), warning that its lapse undermines state and local cyber operations as other federal support declines. The four-year program expired in September 2025; the bipartisan PILLAR Act, which would have extended it through 2033, passed the House but stalled in the Senate. NASCIO and allied local-government organizations requested $300 million in one-year appropriations, with program rules directing 80% of funding to local-government services.
NASCIO cited partial defunding of the Center for Internet Security’s Multi-State Information Sharing and Analysis Center (MS-ISAC) as an additional strain on state and local defenses. The association also called for reauthorization of FirstNet before its statutory authority expires in February 2027, and urged lawmakers to preserve state authority over artificial-intelligence governance rather than broadly preempting state AI laws.
See the reporting duties and controls this puts on the clock.
6 events from the most recent confirmed update back to the earliest known activity.
The State and Local Cybersecurity Grant Program (SLCGP) expired after its original four-year term, leaving the state and local cybersecurity funding program without reauthorization.
NASCIO sent congressional leaders a letter urging reauthorization of SLCGP and FirstNet, while also calling on Congress not to broadly preempt state artificial-intelligence laws and regulations.
Federal support for state and local cybersecurity operations was reduced through partial defunding of the Multi-State Information Sharing and Analysis Center, which provided resources and monitoring to roughly 18,000 organizations and communities.
NASCIO, the National League of Cities, and other state and local associations requested that the Senate appropriate $300 million for a one-year continuation of SLCGP funding. The program requires states to direct 80% of funding to local-government services.
State cybersecurity leaders testified before Congress about the benefits their states had received from the SLCGP.
The House advanced the bipartisan PILLAR Act, which would reauthorize and fund the SLCGP through 2033. The measure did not advance in the Senate.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourcestatescoop.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The U.S. House of Representatives has passed legislation to reauthorize the State and Local Cybersecurity Grant Program, extending its funding and support for another decade. The measure, known as the Protecting Information by Local Leaders for Agency Resilience Act (PILLAR Act), aims to provide continued financial assistance to state and local governments to bolster their digital defenses against cyber threats. The program, which had previously lapsed at the end of September, has already distributed $1 billion to local governments and is now set for renewal until 2033, pending Senate approval. In addition to the grant program reauthorization, the House also overwhelmingly approved the Strengthening Cyber Resilience Against State-Sponsored Threats Act, which will establish an interagency task force led by the FBI and CISA to counter Chinese state-sponsored cyber threats. Lawmakers emphasized the importance of these measures in enhancing national security and equipping local entities with the necessary tools to defend against foreign cyber adversaries. The legislation reflects a bipartisan commitment to strengthening the nation’s cybersecurity posture at all levels of government.
Jul 12, 2026
The Cybersecurity and Infrastructure Security Agency (CISA) has announced the planned conclusion of its cooperative agreement with the Center for Internet Security (CIS), a nonprofit organization that has provided cybersecurity services to state, local, tribal, and territorial (SLTT) governments. This transition, set to take effect on September 30, 2025, marks a significant shift in how CISA supports SLTT partners in defending against cyber threats. CISA stated that the move is part of a broader strategy to enhance accountability, maximize the impact of federal resources, and empower local entities to take a leading role in their own cybersecurity. The agency emphasized that, moving forward, SLTT governments will have access to grant funding, no-cost cybersecurity tools, and direct expertise from CISA to bolster their digital defenses. The State and Local Cybersecurity Grant Program (SLCGP) and the Tribal Cybersecurity Grant Program (TCGP) will continue to provide financial support, while services such as Cyber Hygiene scanning, phishing assessments, and vulnerability management will remain available at no cost. CISA also highlighted the availability of professional services, including vulnerability assessments and incident response coordination, as well as regular security operations center calls to keep SLTT partners informed of emerging threats. The end of the CIS agreement follows earlier funding cuts to the Elections Infrastructure Information Sharing and Analysis Center (EI-ISAC), which was also operated by CIS and played a key role in advising election officials on cyber threats. The rationale behind the funding shift is to streamline federal support and ensure that resources are used efficiently to strengthen the nation’s overall cyber resilience. However, some observers have questioned whether discontinuing funding for CIS, which has been instrumental in providing affordable cybersecurity services to local governments, will actually improve resiliency. CISA has not clarified whether the funds previously allocated to CIS will be redirected to other state and local cybersecurity initiatives. The transition is part of CISA’s new model to reinforce its position as the nation’s lead cyber defense agency, focusing on direct engagement and support for critical infrastructure and frontline partners. The Center for Internet Security has not yet responded to inquiries regarding the impact of the funding cut on its operations or on the services it provides to SLTT entities. The move underscores a broader trend in federal cybersecurity policy, emphasizing direct federal support and accountability over third-party partnerships. As the transition unfolds, SLTT governments are expected to rely more heavily on CISA’s in-house resources and expertise. The long-term effects of this policy change on the cybersecurity posture of local governments remain to be seen, particularly in light of increasing cyber threats targeting public sector entities. CISA’s commitment to providing ongoing support through grants, tools, and professional services is intended to mitigate any potential gaps left by the end of the CIS partnership. The agency has encouraged SLTT partners to engage with its new suite of resources and to participate in regular communications to stay abreast of evolving cyber risks. This development represents a significant evolution in the federal approach to supporting local government cybersecurity, with a focus on direct federal engagement and resource allocation.
Jul 1, 2026
Congressional leaders introduced a compromise federal funding package that would **temporarily extend two major U.S. cybersecurity authorities**—the 2015 *Cybersecurity and Infrastructure Security Act* (which provides liability protections intended to encourage private-sector cyber threat information sharing with the federal government) and the **State and Local Cybersecurity Grant Program**—through **September 30**. The proposal follows prior stopgap extensions after the statutes lapsed, and comes as lawmakers debate longer-term reauthorization options, including competing House and Senate proposals and a draft approach from Sen. Rand Paul that would remove the original law’s liability protections. Separately, reporting highlighted **internal leadership instability at CISA**: acting director **Madhu Gottumukkala** reportedly attempted to remove or reassign CISA CIO **Robert Costello** via a management-directed reassignment, but was blocked after objections from other political appointees within DHS. The episode adds to concerns about decision-making and turnover at the agency at a time when CISA is responsible for coordinating federal cyber defense, incident response support, and collaboration with state, local, and private-sector partners—functions that could be affected by sustained leadership disruption.
Jun 29, 2026