The Satellite Cybersecurity Act of 2025 requires the Comptroller General to study federal efforts supporting cybersecurity for commercial satellite systems and report findings to Congress within two years. It mandates the Department of Commerce to establish a public online clearinghouse containing voluntary cybersecurity resources, including tailored guidance for small businesses. The clearinghouse will consolidate recommendations covering risks like hacking, jamming, supply chain vulnerabilities, and foreign ownership threats to satellite systems. This bill directly affects commercial satellite operators (non-Federal entities with licenses), federal agencies using satellite services, and small businesses developing satellite technology.
This bill establishes a voluntary DHS cybersecurity training program for current Department of Homeland Security employees not yet in cybersecurity roles. It requires the DHS Director to create a curriculum using existing frameworks (like the Federal Cyber Defense Skilling Academy), offer training through various methods (online, in-person, on-the-job), and set participation criteria. The program mandates annual reports to Congress for seven years, tracking participants, positions filled after training, and success metrics. The Under Secretary for Management must also report on cybersecurity vacancies, support recruitment into the program, and connect graduates with cybersecurity job opportunities within DHS.
The BRIDGE Africa Act requires the U.S. government to develop a strategy within one year to boost American investment in African technology and entrepreneurship, focusing on countries like Nigeria, Kenya, and Ghana. It mandates a detailed plan analyzing security benefits, business barriers, and training needs (like digital skills and cybersecurity) for U.S.-Africa tech partnerships. The bill also directs a U.S.-hosted summit in Africa to coordinate investment opportunities in AI, agriculture, health, and other sectors. This strategy and summit aim to strengthen economic ties and security through concrete policy coordination, not speculative outcomes.
The SECURE American Telecommunications Act establishes new licensing requirements for submarine and terrestrial telecommunications cables connecting the United States to foreign countries. It prohibits issuing licenses for cables connecting to "foreign adversaries" or using equipment on a specific FCC list, and shifts licensing authority from the President to the Federal Communications Commission. The bill requires cable operators to report cybersecurity incidents within 24 hours and follow minimum physical and cybersecurity standards for cables and landing stations. It also creates a study on establishing submarine cable protection zones and increases penalties for damaging submarine cables, with violations potentially resulting in up to 25 years in prison.
The ANCHOR Act requires the National Science Foundation to develop a plan within 18 months to improve cybersecurity and telecommunications for the U.S. Academic Research Fleet - comprising university- and lab-operated oceanographic research vessels. The plan must assess each vessel's specific needs for internet speed, data transfer, telemedicine, and remote expert access during missions, alongside cost estimates for upgrades like satellite equipment and staff training. It also mandates evaluating shared solutions to reduce costs and outlining funding strategies involving NSF, Navy research offices, and vessel operators. The bill directly affects research vessels conducting ocean science, aiming to modernize their digital infrastructure without altering scientific methods.
This bill, the Western Balkans Democracy and Prosperity Act, aims to strengthen democratic institutions and economic prosperity across the seven Western Balkans countries: Albania, Bosnia and Herzegovina, Croatia, Kosovo, Montenegro, North Macedonia, and Serbia. It establishes concrete mechanisms including anti-corruption initiatives, regional economic development programs focused on reducing Russian energy dependence, cybersecurity support, and youth leadership development. The bill requires reports on Russian and Chinese malign influence operations in the region and codifies sanctions against those undermining democracy, while providing pathways for sanction termination. It emphasizes supporting European integration, promoting cross-cultural educational exchanges, and fostering regional trade and investment opportunities to address high poverty and youth out-migration in the region.
This bill extends the expiration date for cybersecurity information sharing authorities under the 2015 law from September 30, 2025, to September 30, 2035. It directly affects organizations and government entities that share cybersecurity threat information under the existing framework. The key provision amends Section 111(a) of the Cybersecurity Information Sharing Act of 2015 to update the deadline, with retroactive effect starting October 1, 2025. The bill also updates the law's title to "Protecting America from Cyber Threats Act" for consistency.
The Connected Vehicle National Security Review Act creates a new Office within the Department of Commerce to review transactions involving connected vehicles (vehicles with internet connectivity) that could pose national security risks from countries like China, Russia, Iran, or North Korea. The Office can require companies to implement cybersecurity measures, remove certain components, or block transactions if they pose a significant risk to U.S. critical infrastructure. Companies must provide information about their transactions and comply with review findings, with penalties including fines of up to $1 million per violation. The law requires annual risk assessments from the Director of National Intelligence to identify high-risk supply chain participants, expanding government authority to regulate the connected vehicle supply chain for national security purposes.
This bill directs U.S. agencies to prioritize facilitating U.S. liquefied natural gas (LNG) exports to Taiwan and strengthen Taiwan's energy infrastructure resilience. It requires the State, Commerce, and Energy Departments to identify barriers to LNG exports, support Taiwan's grid cybersecurity, physical security, and emergency planning, and establish a U.S.-Taiwan Energy Security Center. The bill mandates annual reports to Congress on implementation progress, barriers to exports, and the effectiveness of resilience programs. It directly affects U.S. LNG exporters, Taiwan's energy infrastructure operators, and U.S. federal agencies coordinating with Taiwan. The legislation does not authorize new funding but directs existing agencies to prioritize these activities under the Taiwan Enhanced Resilience Act.
This bill prohibits federal agencies from allowing "covered applications" (apps developed, owned, or controlled by Chinese entities or determined to pose national security risks by the Secretary of Defense) on government devices. It requires agencies to remove such apps within 60 days of being identified and issue cybersecurity-safeguarded exception guidelines for research/intelligence use within 270 days. The Office of Management and Budget must maintain and update a list of covered apps every 180 days, consulting with homeland security, defense, and intelligence agencies. The policy directly affects all federal agencies managing government devices, aiming to prevent potential security risks from Chinese-linked applications.
