Is this email difficult to read? View it in a web browser. ›

The Wall Street Journal ProThe Wall Street Journal Pro

CybersecurityCybersecurity

Sponsored by Zscaler logo.

Private-Sector Role Clarified in Offensive U.S. Cyber Strategy

By Kim S. Nash

 

Hello. The Trump administration’s top cybersecurity official says private-sector firms aren’t expected to confront nation-state hackers under a new cyber strategy that takes an aggressive approach to protecting critical U.S. infrastructure.

“It’s not your job to defend against the Chinese or the Russians or the Iranians,” Sean Cairncross, the White House’s national cyber director, said at an industry event Tuesday. Read our full story.

Also today: Although lawmakers say the U.S. blunted Iran’s ability to retaliate with cyberattacks, companies should be on high alert. Read more. 

More news below.

 

‏‏‎ ‎

CONTENT FROM: ZSCALER
From Blocking to Securing AI: CISO Priorities for 2026

Legacy security can’t keep up with AI’s rapid evolution and modern threats. In 2026, CISOs must shift from blocking tools to securing AI use. Zscaler’s AI security platform, powered by Zero Trust, provides the visibility control and protection needed to stop risks, prevent malware, and enable GenAI adoption—without slowing innovation. Secure AI now!

Act Fast. Stay Secure.

 

More Cyber News

PHOTO: ARNAUD FINISTRE/AGENCE FRANCE-PRESSE/GETTY IMAGES

Vulnerability warning: Two industrial products from France's Schneider Electric have security flaws that should be patched immediately, the U.S. Cybersecurity and Infrastructure Security Agency said Tuesday. Hard-coded credentials in certain versions of the EcoStruxure IT Data Center Expert product could allow remote commands from unauthorized parties, CISA said.

  • Also, Schneider's SCADAPack x70 RTU products, a communications tool for remote monitoring of energy systems, has a bug in how it checks for unusual activity, CISA said.

American Express appoints new CISO. Gleb Reznik, who joined American Express in August 2024, is replacing Fred Gibbins as CISO. Reznik has a long career in financial-services cybersecurity, with cyber leadership roles at JPMorgan Chase, Synchrony and Capital One. Gibbins plans to retire in October, he said in a post on LinkedIn. He has been at American Express for 28 years, 13 as CISO. 

 
Alt text.

▶️ Google’s Approach to the Changing Cybersecurity Landscape

Sandra Joyce, Google Threat Intelligence vice president, discusses the democratization of hacking and the strategies the tech giant is using for active defense.

Watch Now
 
52%

Percentage of 1,905 tech decision-makers who said their company’s average ransomware payment last year exceeded its annual cybersecurity budget, says new research from cyber company Armis.

In the U.S., the average ransomware payment was $11.6 million.
In the U.K., £7.7 million, or about $10.3 million.
In the European Union, €8.4 million, or about $9.7 million.

 

About Us

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten and James Rundle. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.

 
Share this email with a friend.
Forward ›
Forwarded this email by a friend?
Sign Up Here ›
 
Desktop, tablet and mobile. Desktop, tablet and mobile.
Access WSJ‌.com and our mobile apps. Subscribe
Apple app store icon. Google app store icon.
Unsubscribe   |    Newsletters & Alerts   |    Contact Us   |    Privacy Notice   |    Cookie Notice
Dow Jones & Company, Inc. 4300 U.S. Ro‌ute 1 No‌rth Monm‌outh Junc‌tion, N‌J 088‌52
You are currently subscribed as [email address suppressed]. For further assistance, please contact Customer Service at pro‌newsletter@dowjones.com or 1-87‌7-975-6246.
Copyright 2026 Dow Jones & Company, Inc.   |   All Rights Reserved.
Unsubscribe