Texas Cyber Command Launched: Governor Abbott Ushers New Era in Cybersecurity
Summary
- Texas Cyber Command Is Law: Governor Greg Abbott signed HB 150 on June 2, 2025, creating the Texas Cyber Command.
- Strategic Location: It will be headquartered at the University of Texas at San Antonio (UTSA).
- What It Will Do: Protect state and local government systems, with a threat intelligence center, a digital forensics lab and an incident response unit.
- Increased Investment: The bill sets aside $135 million from the state’s General Revenue Fund through 2027.
- Collaboration Emphasis: The command will draw on UTSA’s partnerships with the NSA, FBI and Department of Homeland Security.
Abbott Signs the Bill in San Antonio
Texas Governor Greg Abbott signed a bill on June 2, 2025, creating the Texas Cyber Command, a new organization to protect state and local government systems from cyber threats. Abbott had declared the command an emergency item in his State of the State address in February. “Our state is under constant attack by cyber criminals, attacks that occur thousands of times every single second of every single day,” Abbott said. “Attacks often come from foreign actors from hostile countries like China, Russia, and Iran. They successfully attacked cities, counties, and government agencies in Texas, from Mission to Muleshoe. That changes today.”
Why San Antonio
It’s based at UTSA. San Antonio is a growing cybersecurity hub, home to the NSA’s Texas Cryptology Center and the U.S. 24th Air Force Cyber Command, as well as National Centers of Academic Excellence in Information Security, including UTSA. The city’s CyberSecurity Council says it has the second-largest concentration of cyber experts in the country.
What the Command Will Do
The command will run a cyber threat intelligence center to find and fix weaknesses in government systems and train state workers on preventing breaches. It will also include a digital forensics lab and an incident response unit.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Texas has seen the damage firsthand. In March, the city of Mission declared a state of emergency after a cyberattack, and the year before, Abilene suspended its public records law requirements after a disruptive attack.
Funding and Staffing
According to the bill, $135 million from the state’s General Revenue Fund will cover operations through 2027, including secure facilities, staffing and cyber programs. UTSA has committed $60.4 million for property and renovation, the San Antonio Express-News reported. The facility is expected to be running within 18 months, starting with 65 full-time staff and doubling by 2027.
Working with Federal Partners
It won’t work alone. The command will lean on UTSA’s existing ties to the NSA, the FBI and the Department of Homeland Security, which gives a brand-new state agency access to federal threat intelligence and training from its first day.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
What It Means for Other States
Few states have tried this. Its success will depend on hiring enough skilled staff and on how well it supports cities and counties that lack their own security teams. For local governments in Texas, the command could mean faster help when an attack hits.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day
CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes within a...
PaperCut NG/MF: The Print Server That Learned Remote Code Execution Again
CVE-2026-81578 and CVE-2026-82078 chain to pre-auth RCE on PaperCut Application Server. Confirm Emergency Patch Release 2, restrict admin exposure, and hunt like...
JFrog Artifactory CVE-2026-82329: Empty Join Key, Full Admin Token, Busy Scanners
CVE-2026-82329 lets attackers forge Artifactory admin tokens via a deterministic empty join key. Mass scanning peaked near 406,000 attempts; patch fixed builds...
Friday’s brief: Apache’s HTTP/2 fix, then Check Point break-ins, a ScreenConnect add-on and a GitHub secret stealer
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.