Hello. By pairing AI with their industry expertise, bug hunters are targeting fewer, but higher-prized security flaws that promise a bigger payday.

Human insight remains critical to steering AI models to find deeper, novel vulnerabilities—“things that people have never seen before,” as Dave Gerry, Bugcrowd’s chief executive, puts it. Read our full story.

Also today: 

• Anthropic loosens limits on how Mythos testers can share cyber threat information
• U.K. car dealership credits smart insurance decision for insulating it after Jaguar cyberattack
• 7-Eleven was hacked
• New York public health system says 1.8 million people breached

• Cybersecurity firm Palo Alto Networks and Mozilla, the organization behind the Firefox internet browser, recently said the model let them find many more software vulnerabilities than they normally would.
• Related reading from WSJ Pro: States Concerned Over Access to Frontier AI Model Pilots

About 1.8 million people were affected by a hack at a major New York health system that went on for nearly three months starting in November. NYC Health + Hospitals reported the tally to the U.S. Department of Health and Human Services after disclosing the incident in February. Clinical, insurance, financial, biometric and geolocation information was breached, the health system said. (TechCrunch)

U.K. car dealership Vertu Motors said insurance largely insulated it from a financial hit related to the cyberattack at Jaguar Land Rover. The August hack led to five weeks of factory downtime at the car maker. Jaguar's lack of production decreased Vertu's profits by about £3.9 million, or $5.2 million, in its most recent fiscal year, CFO Karen Anderson told financial analysts Monday. Vertu, one of the biggest dealership chains in the U.K., received £3.4 million from insurance, CEO Robert Forrester said. 

• Watch our interview on how U.K. officials quantified the damages from the cyberattack at Jaguar. (gift link)

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten and James Rundle. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.