HR 1495, the Digital Economy Cybersecurity Advisory Act of 2025, establishes a new advisory board within the National Telecommunications and Information Administration (NTIA) to provide recommendations on cybersecurity policies. The board, made up of 5-25 members with cybersecurity or supply chain expertise from government, private industry, and network operators, will advise the NTIA on securing internet networks while promoting economic growth and innovation. Key areas of focus include best practices for critical internet protocols like Border Gateway Protocol, secure supply chains, and removing barriers to trust and commercialization in digital networks. The board will operate for four years, with members serving without pay and reporting exclusively to the NTIA.
This bill establishes the Defense Technology Hubs Program, requiring the Secretary of Defense to create 10 regional hubs by 2028. These hubs - formed by partnerships of universities, defense contractors, small businesses, and state/local governments - will focus on accelerating development of defense technologies like AI, quantum computing, and hypersonics. The program authorizes $375 million (2026-2030) for grants, with hubs using funds for research, prototyping, and workforce training while complying with security rules like export controls (ITAR/EAR) and cybersecurity standards. It prioritizes geographic diversity and aims to strengthen collaboration between defense agencies, industry, and academic institutions to boost national security innovation.
The Cybersecurity in Agriculture Act of 2025 establishes five regional centers to strengthen cybersecurity for the agriculture sector, directly benefiting farmers, food producers, and supply chain businesses. Funded with $25 million annually from 2026-2030, the centers will research and develop sector-specific tools like threat-monitoring systems, intrusion detection, and secure network protocols. They will create testing environments for cybersecurity solutions, conduct training for agricultural workers, and coordinate with industry partners to address digital threats. This program aims to improve the sector’s resilience against cyberattacks without advocating for specific policy outcomes.
The PILLAR Act reauthorizes the CISA State and local cybersecurity grant program through fiscal year 2035, expanding its scope to cover operational technology systems and systems using artificial intelligence. It requires grant recipients to adopt multi-factor authentication and other cybersecurity best practices, with higher federal funding rates (up to 75% for multi-entity groups) if these measures are implemented by October 2027. The bill also mandates outreach to rural and small local governments to ensure equitable access to cybersecurity resources and includes a requirement for GAO reviews of artificial intelligence adoption across funded programs.
HR 5764, the "AI for Main Street Act," amends the Small Business Act to require the Small Business Administration (SBA) to provide guidance and training to small business concerns on using artificial intelligence. It directly affects small businesses by adding new SBA responsibilities to help them evaluate AI for operations, including best practices, cybersecurity, data protection, regulatory compliance, and customer trust. Key provisions mandate the SBA to offer information, training, and outreach on incorporating AI into business processes, such as planning for unexpected circumstances. The bill does not authorize new funding for these activities. It defines "artificial intelligence" using the existing term from the National AI Initiative Act.
HR 1766, the NTIA Policy and Cybersecurity Coordination Act, creates a new Office of Policy Development and Cybersecurity within the National Telecommunications and Information Administration (NTIA). The office, led by an Associate Administrator, will coordinate cybersecurity and privacy policies, promote innovation in communications technologies, and develop market-based strategies for internet access, digital inclusion, and network security. It will conduct studies on public internet usage, foster collaboration between security researchers and service providers, and advise the NTIA on cybersecurity policy matters. This procedural bill establishes a dedicated unit to streamline policy development but does not directly change laws affecting specific groups.
HR 7294, the "AI for Secure Networks Act," requires the Secretary of Commerce to conduct a study on how artificial intelligence (AI) technology impacts telecommunications network security. The study must examine AI's potential to improve security through real-time threat detection, network resiliency, and energy efficiency, as well as its use with Open RAN and virtualized security technologies, while also assessing associated risks. The Secretary must consult with the Federal Communications Commission and industry stakeholders and submit a report with findings and potential recommendations to Congress within one year of the bill's enactment. This bill does not create new regulations or directly affect businesses or consumers; it is a procedural step to gather information about AI's role in securing telecom networks.
This bill establishes five regional cybersecurity centers for the agriculture sector through competitive grants awarded to eligible land-grant universities. These centers will conduct research, develop security tools (like intrusion detection systems), and run training exercises specifically targeting cyber threats from countries including China, Russia, and Iran. The centers must focus on protecting seed agriculture, horticulture, animal agriculture, and supply chains from cyberattacks. The bill authorizes $25 million annually from 2026 to 2030 to fund these centers and their activities.
HR 1709, the "Understanding Cybersecurity of Mobile Networks Act," requires the Assistant Secretary of Commerce to produce a report within one year of enactment examining cybersecurity vulnerabilities in mobile service networks and devices. The report must assess how mobile providers address security risks, customer awareness of cybersecurity when purchasing services, encryption practices, barriers to adopting stronger security measures, and the prevalence of surveillance technologies like cell site simulators. It specifically excludes 5G networks and focuses on real-world vulnerabilities affecting U.S. mobile networks and devices used by consumers, businesses, and government agencies. The study aims to inform future policy by gathering data from providers, industry experts, and government agencies, without mandating immediate changes to security standards.
HR 7266 establishes the Rural and Municipal Utility Cybersecurity Grant Program, providing $250 million (2026-2030) to help specific electric utilities improve cybersecurity. It directly affects rural electric cooperatives, municipally owned utilities, and small investor-owned utilities (under 4 million MWh/year) by offering grants and technical assistance for advanced cybersecurity technologies. Key provisions include prioritizing funding for entities with limited resources or critical infrastructure, requiring deployment of tools to protect against cyberattacks, and shielding shared cybersecurity information from public disclosure requests. The program aims to strengthen defenses across smaller utility systems without mandating new regulations.
