Good day. President Trump is encountering headwinds on a top national-security priority for his administration with several Republicans joining Democrats in refusing to greenlight a federal spy program ahead of a deadline this week.

The pushback from some members of Trump’s own party, who have long said they have constitutional concerns about the program, comes amid broader intraparty friction. Last week, several conservatives voted against advancing legislation to reauthorize the spy program alongside Democrats, who are protesting Trump’s pick of Bill Pulte to temporarily lead the intelligence community.

Congressional authority for the program, known as Section 702 of the Foreign Intelligence Surveillance Act, expires Friday. The program has been approved in the past under presidents of both parties with bipartisan support, despite the objections from some Republicans and Democrats over civil-liberties concerns.

The program allows the government to collect information on foreigners overseas who are using U.S. communication systems, but it also sweeps up information on Americans who are communicating with those foreigners.

Read our full story here.

Also today:

• OpenAI begins IPO process.
• Democrats press AI bills.
• Insurers tighten claims, controls scrutiny.

House Hearing Focuses on AI’s Cyber Risks. A House Homeland Security subcommittee hearing examined how frontier AI, agentic systems and AI coding tools could both strengthen cyber defenses and enable faster, more scalable attacks. Lawmakers and witnesses focused on risks to critical infrastructure and the need for resilience as AI capabilities accelerate. (Industrial Cyber)

OpenAI Begins IPO Process in Major Market Test. OpenAI confidentially filed paperwork with the Securities and Exchange Commission for a potential initial public offering, setting up a major test of investor appetite for leading AI labs. The ChatGPT maker could go public as early as fall 2026, though it said timing hasn't been finalized. (WSJ)

Essex NHS Trust Discloses Patient Data Theft. An Essex National Health Service Foundation Trust said thousands of patient records were stolen in a cyberattack and disclosed the breach more than six months after being notified. The incident adds to mounting scrutiny of cybersecurity across the U.K. health system. (BBC)

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten, and James Rundle. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.