Good day. States aren’t happy that they’ve been left out of pilot programs for the most advanced artificial intelligence models. Senior cyber officials from more than a dozen states wrote to the chief executives of OpenAI, Anthropic, Google and Microsoft yesterday, requesting access to the latest large language models that have so far only been given to the federal government and big technology companies.

The letter also asks for a formal mechanism to be put in place to consult states before future security-focused releases, and for resources to be made available to them for testing in critical infrastructure use cases.

The officials argue that states run the most critical—and often the most underresourced—services, yet they are being left behind to deal with the implications of this technology.

Read my full story here.

Also today:

• Latvian national sentenced for ransomware attacks.
• Trellix probes source-code breach.
• CISA launches infrastructure security push.

Spooked by Mythos, European Lawmakers Push for Tougher Cyber Rules. Members of the European Parliament called for tougher cybersecurity measures following concerns that advanced artificial intelligence systems such as Anthropic’s Mythos could accelerate vulnerability discovery and exploitation. Lawmakers warned the technology could outpace existing defenses and regulatory frameworks. (GovInfoSecurity)

Latvian National Gets 4 Years Prison for Ransomware Role. A Latvian man was sentenced to four years in a U.S. prison for participating in ransomware attacks by former members of the Conti group, which targeted dozens of victims worldwide. Prosecutors said the scheme involved extortion and significant financial losses, underscoring continued law enforcement efforts against ransomware actors. (CyberScoop)

Trellix Looks Into Breach of Its Internal Source-Code Repository. Cybersecurity firm Trellix said it is investigating a breach involving one of its source-code repositories after unauthorized access was detected. The company said it is assessing the scope of the incident and whether any sensitive data or intellectual property was compromised. (Cybersecurity Dive)

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten, and James Rundle. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.