New plan against artificial intelligence attacks in the US: Legal protection for companies on the table

The U.S. administration is discussing new cyber-incident notification rules aimed at AI-powered attacks, with banks and energy companies among the sectors affected. The talks also cover granting legal protection to organizations that disclose cyber incidents, as the existing law approaches expiration. The push matters because current reporting obligations lapse without renewal, potentially leaving firms exposed just as AI-driven threats intensify. What to watch next is whether Congress extends or replaces the expiring statute and whether liability shields for disclosing companies are included.