A bill proposed in US Congress would require the National Security Agency to inform representatives of other US government agencies about security holes it finds in software like the one that allowed the recent WannaCrypt ransomware attacks.