The vague concept of “cyber threat information” does not just let DHS investigate anyone. By including information pertaining to “a vulnerability of a system or network of a government or private entity,” and the “theft or misappropriation of private or government information, intellectual property, or personally identifiable information,” the bill appears to target whistleblowers and leakers, and threatens investigative journalism.