Welcome back. Ruling out foul play in widespread blackouts across Spain and Portugal last week is a complex process that may take several weeks or more. 

Local authorities said they haven't uncovered immediate signs of a cyberattack but many governments lack sufficient visibility into the operational systems of critical infrastructure to quickly diagnose a cyberattack, said Rob Lee, chief executive of Dragos, which provides cybersecurity software for industrial companies. Read our story.

Other news: 

• California and the U.K. to cooperate on data-privacy matters
• TikTok draws $600 million EU data-protection fine
• CISA budget would be cut 17% under Trump proposal
• Cyber, AI candidates in high demand, unemployment figures show
• And more

• The watchdog also said TikTok last month admitted to storing limited European user data in China, despite having previously denied doing so. TikTok told the watchdog it has since deleted that data. (WSJ)

President Trump seeks to cut CISA budget by 17%. The proposed national spending plan would cut about $491 million from the Cybersecurity and Infrastructure Security Agency's $3 billion budget. CISA staff would also be cut, though no figures were provided. The cuts would eliminate election-security programs. (Cybersecurity Dive)

• Key threat-intelligence companies continue to share information with the U.S. government under the Trump administration. Senior leaders at Amazon, CrowdStrike, Google and Palo Alto Networks said collaboration remains even as pauses and cuts at federal agencies nick cyber programs. (CyberScoop)

New Microsoft accounts will be passwordless by default as the company pushes users to passkeys, biometrics and other security methods. Existing users can change their accounts to passwordless options manually. (Bleeping Computer)

Seven U.S. states banded together to strengthen and enforce their data privacy laws, as national regulation once again stalled in Congress. The states—California, Colorado, Connecticut, Delaware, Indiana, New Jersey and Oregon—said they will share information and resources as well as help each other investigate potential privacy violations. 

• The California Privacy Protection Agency signed a pact with the U.K. privacy regulator to coordinate on data protection issues and share best practices in investigations and other matters. The California office signed similar pacts in recent months with counterparts in South Korea and France. 

• The number of unemployed IT workers dropped to 119,000 from 133,000 in March, according to consulting firm Janco Associates, which bases its findings on data from the U.S. Labor Department.

For one millennial, teaching herself cybersecurity in her spare time led to a better career than her law degree did. (WSJ) 

The WSJ Pro Cybersecurity team is Deputy Editor Kim S. Nash and reporters Angus Loten, James Rundle and Catherine Stupp. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.