US HB5079

Reauthorizes the Cybersecurity Act of 2015 through 2035, extending it 10 years from its previous 2025 expiration date

Adds new definitions for "artificial intelligence," "critical infrastructure," and "Sector Risk Management Agency" to modernize the cybersecurity information sharing framework

Explicitly permits the use of artificial intelligence developed or deployed for cybersecurity purposes in monitoring, detecting, analyzing, and mitigating cyber threats

Requires the Secretary of Homeland Security to develop an outreach plan within 90 days to ensure small and rural critical infrastructure operators understand how to share cyber threat indicators and defensive measures

Expands cybersecurity threat reporting requirements to include prepositioning activities and ransomware, with biennial reports to Congress required starting September 30 and every two years thereafter