CISA’s expiration leaves a dangerous void in US cyber collaboration

CISA’s expiration leaves a dangerous void in US cyber collaboration

On Sept. 30, 2025, the Cybersecurity Information Sharing Act (CISA 2015) officially expired, ending a decade-long framework that helped government and industry share cyber-threat data safely and consistently. For the first time in ten years, the United States lacks the statutory foundation that underpinned its public-private threat-intelligence ecosystem. At a time when adversaries are exploiting automation, AI, and geopolitical distractions, th…