Extends the Cybersecurity Act of 2015's cyber threat information-sharing authority through 2035 and updates its rules on sharing data about artificial intelligence, industrial control systems, and ransomware.

• Changes the Cybersecurity Act of 2015's expiration year from 2025 to 2035.
• Requires the Attorney General and the Homeland Security Secretary to update sharing procedures and make them publicly available, prioritizing fast delivery of relevant threat data to state, local, Tribal, and territorial governments and to owners of non-Federal critical infrastructure.
• Directs the Homeland Security Secretary to run an outreach plan for small and rural critical infrastructure operators, and to brief the House and Senate Homeland Security committees each year on it.
• Adds artificial intelligence, operational technology, edge devices, and internet of things devices to the law's definitions, and requires a cybersecurity threat report every two years by September 30.

• Judiciary Committee (House)
• Armed Services Committee (House)
• Energy and Commerce Committee (House)
• Intelligence (Permanent Select) Committee (House)
• Oversight and Government Reform Committee (House)
• Homeland Security Committee (House)
• Cybersecurity and Infrastructure Protection Subcommittee

Science, Technology, Communications