There's a new cybersecurity bill making its way through Congress, sponsored and written by Diane Feinstein (D-CA), and critics are already calling it a new backdoor for surveillance by the National Security Agency. The Cybersecurity Intelligence Sharing Act of 2014 (CISA) was approved by the Senate Intelligence Committee yesterday, putting it on track for a Senate vote this summer. But like its controversial predecessors, the bill is coming under fire as a step backwards in the fight for surveillance reform.

The bill's primary effect would be a new requirement for sharing information on "cyber threat indicators," a vague term that could refer to anything from an ongoing hack to a vulnerability in commercial software. Once a company makes a report to the government with information about a threat indicator, CISA would require broad sharing across federal agencies, including with the NSA, which would be given a more central role in threat management under the new scheme. Companies would also be encouraged to monitor their networks to gather more information about the threat.

But while advocacy groups are concerned about the bill's NSA implications, CISA's authors have cast the bill as a necessary step in fighting crime online. "Cyber attacks present the greatest threat to our national and economic security today, and the magnitude of the threat is growing," Senator Feinstein said in a statement. "Every week we hear about the theft of personal information from retailers and trade secrets from innovative businesses, as well as ongoing efforts by foreign nations to hack government networks. This bill is an important step toward curbing these dangerous cyber attacks." Financial services trade groups have already applauded the bill, calling it "a good step forward" in protecting financial infrastructure against increasingly powerful online attacks.

The bill's ultimate fate is still unclear, but it may face an uphill battle once it reaches Congress. Senators Udall (D-CO) and Wyden (D-OR) opposed the bill in committee, and several previous cybersecurity bills have stalled after reaching the Senate.