FCC Bolsters Emergency Alerts Against Cyber Hijackers
Published Date: 7/31/2026
Rule
Summary
In the Report and Order, the Federal Communications Commission (the FCC or the Commission) seeks to preserve the public's trust in the Emergency Alert System (EAS) by requiring targeted cybersecurity improvements that will help protect against hijacking by cybercriminals and our nation's adversaries.
Analyzed Economic Effects
5 provisions identified: 3 benefits, 2 costs, 0 mixed.
Estimated industry cost: $26 million/year
The Commission estimates implementation costs for the adopted measures will not exceed $26,198,094 per year in total, based on 25,800 affected entities, 10 hours per entity per year, a $65 mean hourly wage, and mark-ups. This implies an average burden of roughly $1,000+ per entity per year under the Commission's assumptions.
No broad risk-plan or incident-reporting mandate
The Commission declined to adopt the broader cybersecurity risk management plan and incident-reporting proposals from the Alerting Security NPRM. Instead, it adopted only the limited baseline requirements (passwords, patching, segmentation), eliminating requirements to create, update, or annually certify comprehensive risk plans or to report unauthorized access incidents.
Baseline cybersecurity rules for EAS gear
EAS Participants (broadcasters, cable headends, and similar providers) must secure EAS equipment by changing default passwords before use, using strong passwords of at least 15 characters that avoid dictionary words and reuse, or by using alternative authentication meeting NIST guidance. They must also promptly test and install security-related firmware/software patches and use a network firewall or comparable network segmentation to limit remote access.
60-day compliance deadline
EAS Participants must comply with the new cybersecurity requirements within 60 days after the rule's publication in the Federal Register; the rule's effective date is September 29, 2026. The 60-day compliance timeframe applies to changing defaults, patching, and implementing network segmentation or equivalent safeguards.
WEA not covered by these rules
The Commission does not apply these targeted cybersecurity requirements to Wireless Emergency Alerts (WEA) at this time. The Order finds no reported successful WEA attacks and concludes best practices rather than mandatory requirements are currently appropriate for WEA.
Personalized for You
How does this regulation affect your finances?
Personalize government policy and PRIA will tell you what this federal register document means for your household, plus every other regulation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.
Key Dates
Department and Agencies
Related Federal Register Documents
2026-15479, Information Collection Being Submitted for Review and Approval to Office of Management and Budget
As part of its continuing effort to reduce paperwork burdens, as required by the Paperwork Reduction Act (PRA) of 1995, the Federal Communications Commission (FCC or the Commission) invites the general public and other Federal Agencies to take this opportunity to comment on the following information collection. Pursuant to the Small Business Paperwork Relief Act of 2002, the FCC seeks specific comment on how it can further reduce the information collection burden for small business concerns with fewer than 25 employees.
2026-15600, Wireless Emergency Alerts; The Emergency Alert System; Modernization of the Nation's Alerting Systems
In this document, the Federal Communications Commission ("FCC" or "Commission") adopted a Further Notice of Proposed Rulemaking that seeks comment on proposed rules intended to make the Emergency Alert System (EAS) and Wireless Emergency Alerts (WEA) more resilient, flexible, and useful.
2026-15478, Information Collection Being Submitted for Review and Approval to Office of Management and Budget
As part of its continuing effort to reduce paperwork burdens, as required by the Paperwork Reduction Act (PRA) of 1995, the Federal Communications Commission (FCC or the Commission) invites the general public and other Federal Agencies to take this opportunity to comment on the following information collection. Pursuant to the Small Business Paperwork Relief Act of 2002, the FCC seeks specific comment on how it can further reduce the information collection burden for small business concerns with fewer than 25 employees.
2026-15480, Information Collections Being Reviewed by the Federal Communications Commission
As part of its continuing effort to reduce paperwork burdens, and as required by the Paperwork Reduction Act of 1995 (PRA), the Federal Communications Commission (FCC or Commission) invites the general public and other Federal agencies to take this opportunity to comment on the following information collections. Comments are requested concerning: whether the proposed collection of information is necessary for the proper performance of the functions of the Commission, including whether the information shall have practical utility; the accuracy of the Commission's burden estimate; ways to enhance the quality, utility, and clarity of the information collected; ways to minimize the burden of the collection of information on the respondents, including the use of automated collection techniques or other forms of information technology; and ways to further reduce the information collection burden on small business concerns with fewer than 25 employees. The FCC may not conduct or sponsor a collection of information unless it displays a currently valid Office of Management and Budget (OMB) control number. No person shall be subject to any penalty for failing to comply with a collection of information subject to the PRA that does not display a valid OMB control number.
2026-15598, Upper C-Band (3.98-4.2 GHz); Expanding Flexible Use of the 3.7 to 4.2 GHz Band
In this document, the Federal Communications Commission (Commission) adopted a Report and Order, Order of Proposed Modification, and Order on Reconsideration (Order), that expands the ecosystem for next-generation wireless services in the 3.7-4.2 GHz band (C-band) by making 160 megahertz of the 3.98-4.2 GHz band (Upper C- band) available for terrestrial wireless flexible use. This action is pursuant to Congress' direction in the One Big Beautiful Bill Act to complete a system of competitive bidding by July 4, 2027, for at least 100 megahertz of spectrum in the 3.98-4.2 GHz band. The Order creates a single 3.7 GHz Service that spans 3.7-4.14 GHz and adopts competitive bidding procedures for an auction. The Order largely applies the current Lower C-band licensing and operating rules to the Upper C-band, but it imposes more forward-leaning performance requirements. The Commission also generally adopts the Lower C-band technical rules for the Upper C-band, with certain modifications designed to reinforce a successful coexistence environment with adjacent band radio altimeters. The Order requires new licensees in the Upper C-band, as a condition of their licenses, to reimburse defined incumbent Fixed Satellite Service (FSS) licensees for reasonable and necessary costs associated with migrating FSS operations out of the reconfigured portion of the Upper C-band, consistent with the Commission's Emerging Technologies precedent. The Order also provides incentives to eligible space station operators that meet their clearing obligations by specified transition deadlines. Finally, new Upper C-band licensees must provide rebates for defined classes of eligible aircraft owners and operators to facilitate compliance with the FAA's radio altimeter retrofit requirements, which are designed to promote successful coexistence between Upper C-band licensees and radio altimeters in the 4.2-4.4 GHz band.
2026-15418, Seeking Comment on Prohibiting the Importation and Marketing of Certain Covered UAS and UAS Critical Components and Equipment Listed in Section 1709 of FY2025 NDAA.
In this document, the Public Safety and Homeland Security Bureau (PSHSB) and the Office of Engineering and Technology (OET) seek comment on proposing to prohibit the continued importation and marketing of certain previously authorized equipment that has been determined to pose an unacceptable risk to the national security of the United States or to the and security of United States persons. Through Public Notice, acting pursuant to section 2.939 of the Federal Communications Commission's rules, PSHSB and OET propose to apply such prohibitions to certain previously-authorized foreign-produced uncrewed aircraft systems (UAS) and UAS critical components, and certain communications and video surveillance equipment listed in section 1709 of the Servicemember Quality of Life Improvement and National Defense Authorization Act for Fiscal Year 2025 (FY2025 NDAA), added to the Covered List in December 2025.
Previous / Next Documents
Previous: 2026-15599, Amendment of United States Area Navigation Route T-388 in the Vicinity of Kodiak, Alaska
This action amends United States Area Navigation Route (RNAV) T-388 in the vicinity of Kodiak, Alaska. The FAA is taking this action to increase the route structure connectivity in Alaska.
Next: 2026-15603, Amendment of United States Area Navigation Routes (RNAV) T-285 and T-286 in the Vicinity of Thedford, NE
This action amends the published coordinates of the Thedford, NE, Very High Frequency Omnidirectional Range/Distance Measuring Equipment (VOR/DME) in the legal descriptions of Area Navigation (RNAV) routes T-285 and T-286 in the vicinity of Thedford, NE. The FAA is taking this action due to discovering that the published coordinates were incorrect by a distance of 344 feet.