Cybersecurity bill expands federal threat-sharing to rural operators
H.R. 5079 — Widespread Information Management for the Welfare of Infrastructure and Government Act · Filed by Andrew Garbarino (R-NY) · 1 cosponsor · Introduced Sep 2, 2025 · Reported out
Your members of Congress
Enter a ZIP to see where your representative and both senators stood on this bill.
Looked up on this device — your ZIP is never stored on our servers.
What it does
This bill updates the Cybersecurity Act of 2015 to modernize how federal and non-federal entities share cyber threat information and defensive measures. It adds definitions for artificial intelligence and critical infrastructure, expands the types of entities that can receive federal cybersecurity assistance (including smaller and rural infrastructure operators), requires DHS to conduct outreach to help these entities understand how to share threat data, and permits the use of AI tools developed specifically for cybersecurity purposes in threat detection and response.
Why we flagged it
The bill's core function is reauthorizing and updating the 2015 Cybersecurity Act to expand threat-information sharing, improve outreach to underserved infrastructure operators, and permit AI-assisted cybersecurity tools. It is a technical modernization of existing federal cybersecurity coordination mechanisms, not a new regulatory regime or private-sector carve-out.
What the text implies
- The bill permits use of AI 'developed or strictly deployed for cybersecurity purposes' without defining 'strictly deployed' or establishing oversight mechanisms for AI tool validation, potentially allowing deployment of AI systems with limited transparency into their decision-making.
- Expansion of 'Sector Risk Management Agencies' as recipients of federal threat data and technical assistance may shift cybersecurity responsibility to entities whose governance and accountability structures differ from traditional federal agencies.
The full analysis lists 4 implications of this text.
Who stands to gain
Cybersecurity software and services vendors (AI-enabled threat detection platforms); Critical infrastructure operators (water, energy, transportation) receiving federal technical assist; Managed security service providers serving small and rural infrastructure