Hit by ransomware or paid a ransom? Now some companies will have to tell the government

Owners and operators of US critical infrastructure will now in some cases be legally required to report cyberattacks and ransomware payments to the Cybersecurity and Infrastructure Security Agency (CISA).