Hello. AI models are trained to produce an answer even when they are essentially guessing, and will make the same mistakes repeatedly if humans fail to correct them.

That includes potential privacy breaches, which might not be obvious to people who have come to rely on AI tools for everyday tasks at work and in their personal lives. Read more from WSJ. 

Also today: 

• Microsoft's giant "patch Tuesday"
• Anthropic's Mythos worries the Bank of England
• U.S. airspace is less secure from hackers than it should be, cyber audit says
• Ford and Stellantis are under scrutiny for allegedly selling driver data without permission
• And more

The Federal Aviation Administration has failed to fully implement required cybersecurity protections in 45 of its most critical systems governing airspace, according to an audit from the Transportation Department's Office of Inspector General. The FAA has begun the work "but gaps remain," the IG's report said. 

• Also, the FAA isn't fully recording cyber weaknesses in the Transportation Department's security tracking system as required, the report said. (AVWeb)

More money, please: The Environmental Protection Agency is asking Congress for $19.1 million for fiscal 2027 to put toward helping U.S. water facilities improve cyber defenses. That's about double the $9.6 million the EPA received for the effort in 2026.

• Hacks against water providers have increased in the past few years, the EPA noted, adding that a serious cyberattack could disrupt drinking water to communities and impede fire response, among other consequences. (Industrial Cyber)

Ford Motor and Stellantis are being investigated by Montana's attorney general for potential data-privacy breaches. If the automakers sell driving data to third-parties without permission, that could violate the state's consumer protection laws, Attorney General Austin Knudsen said.

Satellite security: A bill to improve the cybersecurity of U.S. satellites made it out of a key Senate committee. The Satellite Cybersecurity Act would require the Commerce Department to work with other federal agencies to create cybersecurity recommendations tailored to the satellite industry and authorize the Government Accountability Office to check up on the cyber work of commercial satellite providers. 

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten and James Rundle. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.