Safeguarding Harvests: Sen. Britt’s Fight for Cyber Safe Agriculture
Summary
- Senator Katie Britt is cosponsoring the reintroduced Farm and Food Cybersecurity Act of 2025.
- Sponsor: Sen. Tom Cotton introduced the bill, S. 754, on February 26, 2025, with Sen. Elissa Slotkin among its cosponsors.
- Risk assessments: USDA would assess cyber threats to the food and agriculture sector every two years, working with CISA.
- Simulation exercises: USDA would run an annual exercise simulating a food-related emergency or disruption.
- Status: The bill was referred to the Senate Agriculture Committee.
Why Farms Are a Cyber Target
Modern farms and food processors run on connected equipment, software and data. That makes them targets. A successful attack on a processor or supplier can disrupt food supplies far beyond one company. Senator Katie Britt of Alabama has joined a bipartisan group of senators backing the Farm and Food Cybersecurity Act of 2025, which aims to protect the sector.
What the Bill Would Do
Sen. Tom Cotton of Arkansas introduced the bill on February 26, 2025, and Britt is one of nine cosponsors, along with Democrats such as Elissa Slotkin of Michigan and Jon Ossoff of Georgia. Supporters argue that a durable and reliable agricultural system underpins both the economy and national security, so its cyber defenses deserve federal attention.
The Role of the USDA
The bill puts the U.S. Department of Agriculture (USDA) in charge. Working with the Cybersecurity and Infrastructure Security Agency (CISA), USDA would assess the cybersecurity threats to and vulnerabilities in the food and agriculture sector every two years. Each assessment must include recommendations for legislative or administrative action.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Annual Food Crisis Drills
USDA would also run an annual simulation of a food-related emergency or disruption, coordinated with the Departments of Homeland Security and Health and Human Services and the Office of the Director of National Intelligence. The scenario must be realistic and affect multiple sectors and jurisdictions. Experts from agriculture, public health, emergency management, transportation and energy would contribute, and USDA would report the results to Congress.
The Threats Facing Agriculture
Ransomware gangs have hit food processors and farm cooperatives in recent years, and the sector’s growing use of automation and connected equipment widens the attack surface. Many farms and small processors have little security staff.
What Happens Next
The bill sits with the Senate Committee on Agriculture, Nutrition, and Forestry. A companion bill, H.R. 1604, was introduced in the House.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Can It Pass?
The bill has bipartisan backing, but it still needs committee action before a floor vote. For farmers and food companies, the practical steps do not have to wait. They can back up key systems, secure remote access and plan for how operations would continue if computers went down.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day
CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes within a...
PaperCut NG/MF: The Print Server That Learned Remote Code Execution Again
CVE-2026-81578 and CVE-2026-82078 chain to pre-auth RCE on PaperCut Application Server. Confirm Emergency Patch Release 2, restrict admin exposure, and hunt like...
JFrog Artifactory CVE-2026-82329: Empty Join Key, Full Admin Token, Busy Scanners
CVE-2026-82329 lets attackers forge Artifactory admin tokens via a deterministic empty join key. Mass scanning peaked near 406,000 attempts; patch fixed builds...
Friday’s brief: Apache’s HTTP/2 fix, then Check Point break-ins, a ScreenConnect add-on and a GitHub secret stealer
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.