Congress granted the agency authority to deny premarket submissions that lack cybersecurity information, starting in October.