This bill establishes the PIVOTT Program to build a cybersecurity workforce by providing full tuition scholarships for students at community colleges and technical schools pursuing cybersecurity or cyber-relevant associate's degrees. Students must complete a 2-year service obligation in cybersecurity roles after graduation, with exceptions for military service, and must participate in skills-based exercises like hackathons and labs. The program requires participating institutions to offer these training components and coordinate internships with government agencies, including critical infrastructure entities and Federal departments. CISA will coordinate implementation with enrollment targets of 250 students in the first year, growing to 10,000 annually within 10 years.
This bill establishes a National Programmable Cloud Laboratories Network, designating up to six "nodes" at eligible institutions (universities, nonprofits, or private companies) by 2026. These nodes must offer remote, AI-assisted lab access for research, require private-sector cost-sharing, and develop sustainable funding models to reduce long-term federal reliance. The network aims to accelerate scientific innovation in fields like biotechnology and materials science by standardizing remote experimentation, improving collaboration, and ensuring cybersecurity. It mandates annual congressional reporting and expires on September 30, 2031.
This bill reauthorizes and updates the Cybersecurity Act of 2015 to improve how federal agencies and critical infrastructure owners share cyber threat information. It requires regular updates to sharing procedures, explicitly allows the use of artificial intelligence *only* for cybersecurity purposes, and mandates new outreach to small or rural critical infrastructure operators (like local utilities or hospitals) to help them understand and participate in threat-sharing. The changes extend the Act's effective period until 2035 and clarify definitions to include modern threats like ransomware and IoT devices.
This bill modernizes the Commodity Futures Trading Commission's (CFTC) authority to conduct research on emerging technologies affecting financial markets. It requires the CFTC to establish programs studying how new technologies impact cybersecurity, market operations, and regulations, and to develop educational materials for market participants. The bill permits the CFTC to use streamlined "other transaction" agreements (bypassing standard procurement rules) and accept non-monetary contributions like data access or facilities for research, with strict safeguards against conflicts of interest. All such activities must be reported annually to congressional agriculture committees, and the authority expires in 2031. The bill directly affects the CFTC's research operations and indirectly impacts market participants through enhanced regulatory understanding.
The Digital Trade Promotion Act of 2025 authorizes the President to negotiate digital trade agreements with trusted international partners, focusing on key provisions like free cross-border data flows, prohibitions on discriminatory taxes for digital services, and protection against forced technology transfers. These agreements would directly benefit U.S. businesses, workers, and small-to-medium enterprises in the digital economy by removing trade barriers for digital goods and services. The bill also establishes congressional oversight requirements, including 60-day notice before negotiations begin, a detailed report before signing, and a 30-day review period during which Congress can disapprove an agreement via a joint resolution. It emphasizes aligning digital trade rules with U.S. values like privacy, cybersecurity cooperation, and an open internet, without creating new domestic regulations.
The Advanced Artificial Intelligence Security Readiness Act of 2025 requires the National Security Agency to develop and share security guidance for advanced artificial intelligence systems that pose national security risks if stolen or sabotaged by foreign actors. This guidance must identify unique vulnerabilities in AI technology and supply chains, including strategies to protect model weights, mitigate insider threats, and counter cyber attacks. The NSA must collaborate with AI developers, researchers, and federal agencies like NIST and the Department of Defense to create this guidance, which will be shared with private sector entities and reported to Congress within 180 and 365 days of enactment. The bill directly affects companies developing critical AI systems and government agencies responsible for securing national security infrastructure.
HR 2154, the American Cybersecurity Literacy Act, directs the Commerce Department’s Assistant Secretary to create a public education campaign about cybersecurity best practices. The campaign will teach Americans how to identify phishing emails, use stronger passwords and multi-factor authentication, secure smart home devices, and safely use public Wi-Fi networks. It specifically targets the general public with practical guidance on reducing everyday cybersecurity risks through accessible materials in multiple languages. The bill does not create new laws but focuses on raising awareness through clear, actionable steps for everyday internet users.
HR 2980 establishes a new Energy Cybersecurity University Leadership Program under the Department of Energy to support graduate students and postdoctoral researchers studying cybersecurity for energy infrastructure. The program provides competitive grants for scholarships, fellowships, and research at colleges and universities, including hands-on training at national labs and utility companies. It specifically aims to increase participation from historically Black colleges, Tribal Colleges, and minority-serving institutions. The bill directly affects advanced students and researchers in cybersecurity and energy fields, focusing on building workforce capacity through education and practical experience.
S 2606 requires the Commander of U.S. Cyber Command to develop a roadmap by August 2026 for collaborating with private industry on AI-powered cybersecurity tools for the Department of Defense. The roadmap must establish how the military can partner with AI developers and cybersecurity firms, including details on contracts, security clearance processes, and technology transition plans. It mandates specific elements like near-term AI use cases, industry engagement strategies, and infrastructure costs, with annual updates to Congress starting in 2028. This bill directly affects private sector companies working with the DoD on AI and cybersecurity, aiming to streamline collaboration for both defensive and offensive cyber operations.
This bill establishes the Last Acre Program to provide grants and loans to broadband providers to deliver high-speed internet (minimum 100 Mbps downstream, 20 Mbps upstream) to agricultural land that is unserved or underserved. It directly affects farmers, ranchers, and agricultural producers on eligible land (including cropland, grassland, and farm sites) who lack sufficient broadband access, with priority for limited resource farmers and ranchers. The program requires providers to meet cybersecurity standards, use a competitive bidding process to determine recipients, and prioritize remote areas and unserved land, with $20 million authorized annually from 2026-2030. It also mandates the National Agricultural Statistics Service to collect detailed broadband usage data through updated agricultural surveys.
