Is this email difficult to read? View it in a web browser. ›

The Wall Street Journal ProThe Wall Street Journal Pro

CybersecurityCybersecurity

Sponsored by Zscaler logo.

U.K. Cyber Law Would Designate Big Tech Firms as Critical Infrastructure

By Kim S. Nash

 

Hello. Four years in the making, U.K. lawmakers proposed Wednesday an expansive cyber law that would designate more types of companies as critical infrastructure and require them to meet minimum security standards.

Unlike in the U.S., that would include tech and cloud providers.

And when hacked, organizations would have a mere 24 hours to notify their regulators. 

Read the full text and let me know your thoughts via email. Thanks!

More news below.

 

‏‏‎ ‎

CONTENT FROM: ZSCALER
Why CIOs Are Adopting A Cafe-like Branch Architecture

Ransomware attacks often start with one compromised user — a single user in a branch can infect everything on your network. This is facilitated by an underlying design principle of MPLS and SD-WAN — lateral movement. Zscaler CEO Jay Chaudhry explains why CIOs are embracing cafe-like branches to stop ransomware, increase business agility and reduce cost.

It’s time to embrace cafe-like branches

 

More Cyber News

PHOTO: PAVLO GONCHAR/ZUMA PRESS

How a Chinese AI company worked around U.S. rules to access Nvidia’s top chips: A Wall Street Journal investigation traced how a chain of deals across several countries got the chips inside the data center, which is wedged between a private school and an upscale apartment complex. A company that arranged the transaction is a subsidiary of a Chinese business on an American trade blacklist. (WSJ)

Finastra names new cyber chief. Matthew McCormack joined the global company as CISO after three years as CISO at Bank of New York Mellon. Finastra, which provides technology to the financial services industry, was hacked a year ago, through its internal file-transfer system. The incident led to the breach of personal data used in customer support. 

  • Finastra also named a new chief information officer, Sanjay Jain, and a new chief data officer, Ali Khan. 

Layoff: Palo Alto, Calif.-based cyber company Deepwatch laid off 60 to 80 of its about 250 employees, joining several security providers that have let staff go this year. They include CrowdStrike, which laid off 500 people, or about 5% of its workforce; as well as Deep Instinct and Sophos, among others. (TechCrunch)

Israeli startup Sweet Security raised $75 million bringing total funding to $120 million. The round was led by Evolution Equity Partners. Sweet offers AI-based tools for securing cloud infrastructure and plans to expand into products for securing AI models. (Bloomberg)

57%

Percentage of hacks last year in which victim organizations became aware of the attack through an outside party, as opposed to detecting the problem themselves. This is according to new research from Google's Mandiant unit, which analyzed information it collected during 450,000 hours of responding to incidents in 2024. 

 

About Us

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten and James Rundle. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.

 
Share this email with a friend.
Forward ›
Forwarded this email by a friend?
Sign Up Here ›
 
Desktop, tablet and mobile. Desktop, tablet and mobile.
Access WSJ‌.com and our mobile apps. Subscribe
Apple app store icon. Google app store icon.
Unsubscribe   |    Newsletters & Alerts   |    Contact Us   |    Privacy Notice   |    Cookie Notice
Dow Jones & Company, Inc. 4300 U.S. Ro‌ute 1 No‌rth Monm‌outh Junc‌tion, N‌J 088‌52
You are currently subscribed as [email address suppressed]. For further assistance, please contact Customer Service at pro‌newsletter@dowjones.com or 1-87‌7-975-6246.
Copyright 2025 Dow Jones & Company, Inc.   |   All Rights Reserved.
Unsubscribe