PolicyBrief
S. 4565
119th CongressMay 19th 2026
Strengthening Cyber Resilience Against State-Sponsored Threats Act
IN COMMITTEE

This bill establishes an interagency task force to coordinate federal efforts against cybersecurity threats from Chinese state-sponsored actors targeting U.S. critical infrastructure.

Rick Scott
R

Rick Scott

Senator

FL

LEGISLATION

New Federal Task Force Targets 'Volt Typhoon' Cyber Threats to Power Grids and Transport Systems

The federal government is moving to harden the digital defenses of the systems we rely on every day—from the electricity in your home to the planes at your local airport. This bill creates a high-level interagency task force led by the Cybersecurity and Infrastructure Security Agency (CISA) and the FBI to specifically hunt down and neutralize 'Volt Typhoon,' a known Chinese state-sponsored hacking group. Within 120 days of the bill becoming law, experts in digital forensics and threat intelligence will begin coordinating across agencies to stop these actors from maintaining 'persistent access' to our critical infrastructure. The goal is simple: ensure that if a global crisis or conflict breaks out, a foreign power can’t just flip a switch and shut down our rail lines, water systems, or power grids.

Guarding the Grid and the Runway

This isn't just about protecting government servers; it’s about the 'critical infrastructure' that keeps modern life moving. Think about a logistics manager at a shipping port or a technician at a regional power plant. Under this bill, the task force is required to develop an awareness campaign to get security resources directly into the hands of these private-sector operators. By assessing sector-specific risks, the government aims to give the people running our utilities the same level of threat intelligence that the Pentagon uses. The bill specifically demands an analysis of how these hackers could hinder the 'mobility' of the U.S. Armed Forces by messing with civilian rail and aviation, recognizing that our military and our economy often use the same tracks and runways.

The Five-Year Security Roadmap

To make sure this isn't just another committee that meets once and disappears, the bill mandates an initial report within 540 days followed by annual updates for five years. These reports will go deep into the weeds, assessing exactly what resources—money, tech, or legal authority—the government is missing to stay ahead of state-sponsored threats. While much of the heavy lifting will happen in classified briefings to protect sensitive intelligence, the bill requires an unclassified executive summary to be posted on a public DHS website. This means you’ll be able to see the broad strokes of the risks we face and what the government is doing about them without needing a top-secret clearance.

Balancing Speed and Oversight

In a move to cut through the usual bureaucratic red tape, the task force is granted exemptions from certain administrative laws like the Federal Advisory Committee Act, allowing them to move faster and share sensitive data more freely between the FBI, DHS, and other agencies. While this speed is great for catching hackers, it does mean the group operates with less public-facing transparency than a typical advisory board. However, the bill builds in a natural 'off' switch: the task force automatically dissolves 60 days after its final briefing. This ensures the group stays focused on the specific mission of countering state-sponsored cyber threats rather than becoming a permanent fixture of the federal bureaucracy.