Hello. After Apple and Google executives told Canadian lawmakers a new bill jeopardizes privacy and digital security, the country's public safety minister said the government is willing to respond to concerns. 

Gary Anandasangaree then dismissed warnings from Apple and Google that the bill would create so-called back doors to access encrypted data. “I believe there’s a number of areas of misinformation,” he said, adding the bill was “never meant to breach encryption … We will clarify it in the bill.” Read more from WSJ.

Also today: 

• AI model companies downplay their cyber risks, Cisco says
• Volvo's exemption to U.S. ban on Chinese-linked connected cars
• Cruise operator Carnival confirms cyberattack
• CISA town halls are back on

• Volvo builds some models at facilities in South Carolina. 
• Related reading from WSJ Pro: Connected Cars Generate Data Enticing to Automakers and Hackers Alike

AI companies are downplaying model vulnerabilities, according to cybersecurity researchers at Cisco. Safety claims from Anthropic, Google, OpenAI, Amazon and xAI don't account for complex attacks that build several malicious prompts, Cisco said. The AI companies largely describe their models' risks based on tests of attempted attacks that use one prompt at a time. (Cybersecurity Dive)

CISA has put out a new schedule of virtual meetings for critical infrastructure providers to give input about upcoming federal cybersecurity rules. The four-hour meetings will take place over four days beginning June 15, the Cybersecurity and Infrastructure Security Agency said. 

• The agency is tasked with writing rules for reporting cyberattacks and other security incidents under the Cyber Incident Reporting for Critical Infrastructure Act passed in 2022. 
• The meetings had been canceled during the recent partial government shutdown that affected the Department of Homeland Security. The rules had been scheduled for release this month.

• Hacking group ShinyHunters claimed responsibility for the attack. Carnival has failed to notify customers that their information is at risk, according to a class-action lawsuit filed in Florida.

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten and James Rundle. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.