The expiration of the Cybersecurity Information Sharing Act (CISA 2015) has left ReversingLabs—a cybersecurity firm heavily reliant on the law’s Automated Indicator Sharing Program (AIS)—vulnerable to legal liabilities when exchanging cyber threat intelligence. The lapse, driven by Congressional inaction during a government funding standoff, eliminates critical legal protections that previously encouraged voluntary threat data sharing among companies. Without these safeguards, ReversingLabs faces operational disruptions in maintaining its threat repositories, increasing exposure to software supply chain vulnerabilities and AI-enabled attacks.The company’s Chief Trust Officer, Saša Zdjelar, warned that the lapse creates a ‘chilling effect’ on threat intelligence collaboration, forcing firms to withhold data due to litigation risks. This weakens collective cyber defenses, granting adversaries a strategic advantage. Zdjelar also highlighted risks to AI security development, as legal uncertainty may restrict data-sharing essential for training AI-powered defense tools. The broader impact includes escalating costs of data breaches—already the highest globally in the U.S.—and potential long-term erosion of trust in cybersecurity partnerships, leaving critical infrastructure and enterprises more susceptible to sophisticated cyber threats.