Toronto subways hit by ransomware as US lawmakers slam ‘burdensome’ cybersecurity rules