- Longest U.S. government shutdown may be coming to an end
- New bill will fill critical funding gap for CISA and FCEA
- Closure will resume in 2026 if no agreement is reached
A critical gap in funding for the Cybersecurity Information Sharing Act (CISA Act) and the Federal Cybersecurity Enhancement Act (FCEA) has been closed with a bill that extends funding through January 2026.
The short-term funding will allow one of the most critical information sharing frameworks to continue operating, allowing the federal government to keep an eye on potential cybersecurity threats.
However, the bill is only a stopgap and requires Republicans and eight Democrats to agree on a handshake deal to hold a vote on extending tax credit subsidies under the Affordable Care Act before the end of December 2025.
The new deadline: January 2026
The bill is critical to keeping CISA and FCEA functioning, and will fill a gap left in U.S. cyber defense since October 1, when funding for both laws expired.
The CISA Act was introduced to provide an information sharing framework and liability protections for private companies that shared threat information with the federal government, while the FCEA introduced standards and procedures to improve the security of critical infrastructure.
The 94-page bill passed the U.S. Senate after 11 hours of deliberations and a 60-40 vote, and it will go to a second vote in the U.S. House of Representatives on Wednesday, before arriving at the White House to await President Trump’s signature.
If signed into law, the bill would extend funding through January 2026, giving Republicans and Democrats some breathing room to agree on next steps.
But it probably won’t be easy. Democrats have prioritized extending health care tax credit subsidies under the Affordable Care Act through 2026, something Republican leaders have flatly rejected throughout the shutdown. Without the credit subsidies, some 24 million Americans could see their health insurance costs rise significantly.
Unless Republicans and Democrats reach a consensus, it is likely that this brief respite from government shutdown will expire in January 2026.
“The proposed temporary extension of the Cybersecurity Information Sharing Act is great and very important for national security,” commented Gary Barlet, public sector technical director at Illumio.
“For years, the law has been the cornerstone for trusted threat intelligence sharing between the public and private sectors, ensuring speed, security and trust. »
“However, if businesses are truly expected to trust and adhere to it, there must be a real long-term expansion of CISA 2025. We should make collaboration easier, not harder. This requires coordination, transparency, and a strong federal framework. Congress must act quickly to restore these protections and demonstrate a clear commitment to defending digital infrastructure.”
The best identity theft protection for every budget
