Congress Urged to Extend CISA 2015 to Cover AI Threat Intelligence Sharing
With the Cybersecurity Information Sharing Act of 2015 expiring in September 2026, defense experts are urging Congress to modernize the statute. Expanding legal protections to AI vendors will incentivize voluntary sharing of critical model vulnerabilities across defense networks.
The upcoming sunset of the Cybersecurity Information Sharing Act of 2015 (CISA 2015) in September 2026 presents Congress with a pivotal window to recalibrate federal information-sharing frameworks. Originally designed to protect private entities sharing cyber threat indicators from antitrust scrutiny and civil liability, the expiring statutory framework must evolve to address artificial intelligence vulnerabilities, adversarial manipulation, and model-poisoning vectors. As the federal enterprise accelerates commercial AI integration into national security architectures, establishing clear legislative incentives for AI developers is becoming an urgent operational imperative.
For the Department of Defense and federal civilian agencies, current threat-sharing channels fall short of capturing non-traditional operational risks unique to machine learning, such as prompt injection exploits, training data corruption, and model inversion attacks. Without explicit statutory liability protections and safe harbor provisions similar to those provided under CISA 2015, commercial frontier AI developers face substantial legal exposure if they proactively disclose algorithm-level vulnerabilities to government authorities. Reauthorizing and broadening the law ensures national security leaders obtain early visibility into model threats before hostile actors weaponize algorithmic flaws against critical mission infrastructure.
Signal Pro feature
This signal is in the subscriber archive.
Signals older than seven days are reserved for members. Subscribe to read the full analysis and unlock the complete Defense Signals archive.
Executive takeaway
Subscribe to receive signals like this — plus the executive analysis behind them.
Get the Signals