Is this email difficult to read? View it in a web browser. ›

The Wall Street Journal ProThe Wall Street Journal Pro

CybersecurityCybersecurity

Sponsored by Zscaler logo.

NSA and Cyber Command Have a New Leader

By Kim S. Nash

 

Hello. The U.S. Senate on Tuesday confirmed Gen. Joshua Rudd as head of the National Security Agency and U.S. Cyber Command.

The position had been open since April 2025, when President Trump fired Gen. Timothy Haugh after about 14 months on the job. Trump didn’t provide a reason for the firing. Trump adviser Laura Loomer had said on social media that Haugh was “disloyal” to the president.

Rudd, whom some Senators have criticized for relatively skimpy cybersecurity leadership experience, takes the dual role as the Trump administration raises the profile of cyber operations during military missions. U.S. officials have described some of the cyber components in the Feb. 28 bombing of Iran and the January capture of Venezuela’s leader Nicolás Maduro.

More news below.

 

‏‏‎ ‎

CONTENT FROM: ZSCALER
From Blocking to Securing AI: CISO Priorities for 2026

Legacy security can’t keep up with AI’s rapid evolution and modern threats. In 2026, CISOs must shift from blocking tools to securing AI use. Zscaler’s AI security platform, powered by Zero Trust, provides the visibility control and protection needed to stop risks, prevent malware, and enable GenAI adoption—without slowing innovation. Secure AI now!

Act Fast. Stay Secure.

 

More Cyber News

PHOTO: TONY GENTILE/REUTERS

Mandia's next gig: Startup Armadin entered the highly competitive AI cybersecurity arena Tuesday with $189.9 million in seed and Series A funding. CEO Kevin Mandia, who sold his incident-response company Mandiant to Google for $5.4 billion in 2022, said Armadin uses AI agents to hunt vulnerabilities in corporate tech. 

CISA canceled meetings that were to have started this week with critical infrastructure providers because of the shutdown of the Department of Homeland Security. The Cybersecurity and Infrastructure Security Agency, part of DHS, had planned a series of webinars to discuss rules due out this year, mandated by the Cyber Incident Reporting for Critical Infrastructure Act. The rules will likely be delayed, CISA said. 

  • Many energy, healthcare, financial services and other infrastructure companies have pressed for minimal new rules, saying other federal, state and industry bodies already impose onerous and sometimes conflicting regulations.

Wealth-management company Mercer Advisors failed to protect personal data, including customer contracts, according to a lawsuit filed by people whose information was stolen by hackers in February. The ShinyHunters ransomware gang published online data it claimed to have stolen from Denver-based Mercer after breaking into the company's networks. (Classaction.org)

$814,000

Average compensation for a CISO at a public company in the U.S. and Canada, according to research from recruiter Hitch Partners, which surveyed 625 corporate cyber leaders.

Consumer software and internet companies paid the most, at $928,000 on average.
Professional services firms paid the least, at $407,000.

 

About Us

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten and James Rundle. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.

 
Share this email with a friend.
Forward ›
Forwarded this email by a friend?
Sign Up Here ›
 
Desktop, tablet and mobile. Desktop, tablet and mobile.
Access WSJ‌.com and our mobile apps. Subscribe
Apple app store icon. Google app store icon.
Unsubscribe   |    Newsletters & Alerts   |    Contact Us   |    Privacy Notice   |    Cookie Notice
Dow Jones & Company, Inc. 4300 U.S. Ro‌ute 1 No‌rth Monm‌outh Junc‌tion, N‌J 088‌52
You are currently subscribed as [email address suppressed]. For further assistance, please contact Customer Service at pro‌newsletter@dowjones.com or 1-87‌7-975-6246.
Copyright 2026 Dow Jones & Company, Inc.   |   All Rights Reserved.
Unsubscribe