Loading story…
The Continuing Appropriations and Extensions Act, 2027 has been signed into law, funding most federal agencies at fiscal 2026 levels through December 11, 2026, pending enactment of full-year appropriations. The stopgap measure also temporarily renews the Cybersecurity Information Sharing Act of 2015, the Federal Cybersecurity Enhancement Act of 2015, and the Technology Modernization Fund.
Renewal of the 2015 information-sharing law preserves liability protections for private entities that voluntarily provide cyber-threat intelligence to the government and maintains authorities supporting the National Cybersecurity Protection System. A permanent reauthorization remains unresolved; industry and government stakeholders have warned that an expiration could suppress private-sector reporting and disrupt real-time threat-intelligence sharing.
See the reporting duties and controls this puts on the clock.
3 events from the most recent confirmed update back to the earliest known activity.
The U.S. House passed the continuing-resolution measure by a 370-48 vote. It funded most federal programs at FY 2026 levels and temporarily extended CISA 2015 and other federal cybersecurity authorities.
The U.S. Senate passed the Continuing Appropriations and Extensions Act, 2027 by a 90-6 vote. The measure included temporary extensions for the Cybersecurity Information Sharing Act of 2015, the Technology Modernization Fund, and the Federal Cybersecurity Enhancement Act of 2015.
The Continuing Appropriations and Extensions Act, 2027 was signed into law, funding federal agencies through December 11, 2026. The law extended the Cybersecurity Information Sharing Act of 2015, Technology Modernization Fund, and Federal Cybersecurity Enhancement Act of 2015 through that period.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A temporary funding bill will extend the 2015 Cybersecurity Information Sharing Act (CISA) and the State and Local Cybersecurity Grant Program until November 21, 2025. Lawmakers are using the extension to reconcile differences between House and Senate versions of long-term renewals, with debates centering on liability protections and extension duration. Industry and federal officials stress the importance of these laws for threat intelligence sharing and critical infrastructure protection.
Jun 29, 2026
The expiration of the Cybersecurity Information Sharing Act of 2015 (CISA 2015) on September 30, 2025, ended a decade-long legal framework that enabled safe and consistent sharing of cyber-threat intelligence between the U.S. government and private sector. The lapse has led to a significant reduction in the volume and speed of threat data exchanged, with industry groups and federal agencies reporting over a 70% decline in shared indicators of compromise and delays in alert dissemination. Key sectors such as healthcare, energy, and finance have experienced increased risks, including a rise in ransomware activity and slower responses to nation-state threats, as organizations hesitate to share information without the law’s liability protections. In response to the growing concerns, legislation to end the federal government shutdown includes a provision to temporarily extend CISA 2015 through January 30, 2026. The Senate has advanced this bill, which, if passed by the House and signed by the President, would restore the legal protections for information sharing, at least temporarily. Industry groups and cyber experts emphasize the urgent need for a more permanent solution, as the current extension is only a stopgap measure. Lawmakers are considering different approaches to amending and extending the law, with the Trump administration advocating for a 10-year extension without changes, while others propose significant reforms.
Jun 29, 2026
U.S. senators are pushing for a 10-year extension of the Cybersecurity Information Sharing Act of 2015 (CISA 2015), which was temporarily extended after the recent government shutdown but is set to expire at the end of January. Lawmakers argue that allowing the law to lapse would hinder the ability of companies and government agencies to share cyber threat data without legal risk, potentially undermining national cybersecurity efforts. Senators Mike Rounds and Gary Peters, who are sponsoring the reauthorization bill, emphasize that the law is crucial for enabling collaborative vulnerability hunting and patching, especially during 'hunt forward' missions conducted by U.S. Cyber Command. The proposed extension would maintain the law's current provisions, with only a name change, and is supported by the administration. However, the path to permanent reauthorization remains uncertain, raising concerns about the continuity of legal protections for cyber threat information sharing.
Jul 12, 2026