The U.S. Cybersecurity and Infrastructure Security Agency released cyberattack reporting rules for companies that operate critical infrastructure, The Wall Street Journal reports. The regulations require companies to "report significant cyberattacks within 72 hours and report ransom payments within 24 hours."