Hello. Hackers linked to Israel’s biggest adversary, Iran, have pulled off a string of successful cyberattacks through known vulnerabilities at institutions that aren’t defended as well as the country’s critical infrastructure.

Israel requires high cyber standards for critical infrastructure deemed key to state security, but not for other bodies and institutions like hospitals, which have been victim to some of the Iran-linked attacks. Some current and former Israeli cyber officials say the country could better protect itself if the government passed a law to expand these rules. Read the full WSJ story. 

Also today:

• Get an early listen of the Dow Jones Risk Journal Podcast before official launch in January
• Shareholders sue e-commerce firm Coupang claiming it misled investors about its cybersecurity
• FCC bans foreign drones and components
• Red Hat breach affects Nissan Motor customers
• Oracle breach affects University of Phoenix students

• That means the companies, their subsidiaries and partners won’t be able to import, market or sell new drone equipment in the U.S. (WSJ)

Coupang sued: Shareholders are suing South Korea's e-commerce giant Coupang, claiming the Seattle-based company misled investors about its cybersecurity measures and delayed revealing a mid-November data breach affecting more than 33 million consumers. The suit, filed in federal court in San Francisco, seeks class-action status. (Reuters)

France's national postal service said deliveries were disrupted Monday by a distributed denial-of-service attack. Financial transactions through the post's banking app were also disrupted. (Euro News)

For-profit college the University of Phoenix said nearly 3.5 million current and former students had their personal information breached in August. The data was compromised in a hack of the university's Oracle E-Business Suite software, which the university learned of in November. The university is notifying people in several states, including California, Maine, Massachusetts and Texas. 

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten and James Rundle. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.