Is this email difficult to read? View it in a web browser. ›

The Wall Street Journal ProThe Wall Street Journal Pro

CybersecurityCybersecurity

Sponsored by Zscaler logo.

Oracle Hack Still Generating Ransom Demands

By Kim S. Nash

 

Hello. A growing number of companies are facing ransom demands from hackers who stole sensitive data through security flaws in widely used Oracle business software nearly six months ago.

The breach, which exposed personal and financial data stored in Oracle E-Business Suite software, bore the hallmarks of an online extortion group known as Clop—a name derived from a Russian term for bed bug, WSJ Pro's Angus Loten reports. Read the full story.

More news below. 

 

‏‏‎ ‎

CONTENT FROM: ZSCALER
CISOs: Stop AI-Powered Threats with Zero Trust + AI

Your workforce is using AI to improve productivity. Keep sensitive data safe without slowing innovation. Zscaler Zero Trust + AI protects sensitive data, blocks malware and enables safe GenAI adoption for every user, app, and location.

Empower AI Innovation

 

More Cyber News

PHOTO: DAMIAN DOVARGANES/AP

Microsoft is staffing up a red team in Israel to hunt down vulnerabilities in its AI tools. The group is part of Microsoft's internal cyber team. The AI red team simulates cyberattacks and potential defenses. (Calcalist)

Happening Tuesday: Frank Cilluffo, director of the McCrary Institute for Cyber and Critical Infrastructure Security at Auburn University, and Drew Bagley, CrowdStrike's chief privacy officer, are among the security leaders due to testify at a House hearing about what the U.S. can do to disrupt threats from nation-state hackers. 

  • The theme is “Defense through Offense.” Tune in at 10 a.m. ET. 
  • Further reading from WSJ Pro: Washington Wants to Get Tough on Nation-State Hackers. Are Infrastructure Operators Ready?

Spanish energy giant Endesa Energía is notifying customers that data about energy contracts and payment methods, as well as contact details and identification numbers, were compromised in a recent cyberattack. Endesa didn't say how the attack occurred or how many people and business partners were affected.

Google plans to shut down a dark-web monitoring tool, which individuals used to search for data that might have been stolen or scraped and then offered online. Feedback that the "dark web report" didn't provide users with enough next steps prompted Google to discontinue it, the company said. People should use other free tools from Google, the company advised. 

  • Scans will stop Jan. 15 and reports won't be available after Feb. 16.

PHOTO: GABBY JONES

/BLOOMBERG

Betterment is investigating a cyberattack through an unnamed third-party tech provider. The investment app said in a letter to customers that it detected the hack Friday. The attackers sent emails to customers that mentioned cryptocurrency, Betterment said.

 

About Us

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten and James Rundle. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.

 
Share this email with a friend.
Forward ›
Forwarded this email by a friend?
Sign Up Here ›
 
Desktop, tablet and mobile. Desktop, tablet and mobile.
Access WSJ‌.com and our mobile apps. Subscribe
Apple app store icon. Google app store icon.
Unsubscribe   |    Newsletters & Alerts   |    Contact Us   |    Privacy Notice   |    Cookie Notice
Dow Jones & Company, Inc. 4300 U.S. Ro‌ute 1 No‌rth Monm‌outh Junc‌tion, N‌J 088‌52
You are currently subscribed as [email address suppressed]. For further assistance, please contact Customer Service at pro‌newsletter@dowjones.com or 1-87‌7-975-6246.
Copyright 2026 Dow Jones & Company, Inc.   |   All Rights Reserved.
Unsubscribe