CISA 2015 CYBER THREAT INFO-SHARING LAW LAPSES AMID GOVERNMENT SHUTDOWN

Summary from the TLDR InfoSec newsletter

The Cybersecurity Information Sharing Act of 2015 expired on September 30 due to a government shutdown, removing critical liability protections that enabled private sector cybersecurity threat information sharing with the government and peers. Without these legal safeguards, organizations now face potential antitrust violations, FOIA disclosure risks, and loss of trade secret protections when sharing threat intelligence, significantly reducing real-time threat visibility across critical infrastructure sectors. Security professionals should immediately consult with legal counsel before engaging in any threat-sharing activities and may need to revert to pre-2015 bilateral agreements, where available, as the timing for congressional reauthorization remains uncertain.