States take first step toward cyberthreat sharing