Banks ordered to promptly flag cybersecurity incidents under new U.S. rule

US federal bank regulatory agencies have approved a new rule ordering banks to notify their primary federal regulators of significant computer-security incidents within 36 hours.