Cyberattacks hit the airline industry and U.S. air traffic control while requirements to report incidents or “even adhere to specific cybersecurity standards” are lacking.