Is this email difficult to read? View it in a web browser. ›

The Wall Street Journal ProThe Wall Street Journal Pro

CybersecurityCybersecurity

Sponsored by Zscaler logo.

Ban of Chinese Connected-Car Software Shows Cracks

By Kim S. Nash

 

Welcome back. The rollout of a federal ban on software with ties to China in internet-connected cars is flawed and unlikely to keep sensitive data away from prying eyes, WSJ Pro's Angus Loten reports. 

Many of the provisions in the rule are left to car companies to self-certify. Plus, code written by China-linked developers in older car models that may be impossible to ferret out. Read our full story.

Also today:

  • Anthropic's weekend talks in Washington over export controls
  • Google sues scammers abusing Gemini AI
  • CISO moves
  • South Korea fines Coupang $410 million for data breach
  • And more
 

‏‏‎ ‎

CONTENT FROM: ZSCALER
The CSA Mandate: Deploy Deception In the Next 90 Days

In response to Mythos, the Cloud Security Alliance issued an emergency briefing with 11 priority actions, endorsed by 250+ CISOs. One is urgent: build a deception capability in the next 90 days. Watch Zscaler EVP & CSO, Deepen Desai, explain why traditional detection controls fail against agentic threats and why Deception is needed to stop these machine-speed attacks. Protect your business today.

Watch the video

 

More Cyber News

PHOTO: ANDRE M. CHANG/ZUMA PRESS

Weekend work: Anthropic dispatched staff to D.C., seeking a deal to end export restrictions that led to shutdown of its most powerful AI models. Administration officials and Anthropic leaders spent several hours on calls Saturday discussing Fable 5, a slimmed-down version of Mythos meant for the general public, people familiar with the talks said. (WSJ)

  • On Sunday, a group of cybersecurity notables signed a letter calling for the administration to lift the export controls.
  • The frenzy over Anthropic’s Fable started late last week, when researchers at Amazon showed some safeguards on Fable could be evaded, alarming White House officials. 

States investigate OpenAI: OpenAI was served Friday with a subpoena seeking documents related to a range of its activities and impact on users, including advertising and the handling of consumer data and health data, among other areas. (WSJ)

Data-breach fine for U.S.-listed Korean online retailer Coupang. South Korean authorities have fined Coupang around $410 million after one of the country’s worst data-breach cases. The leak last year affected 37.6 million people—more than 70% of the country’s total population. (WSJ)

China's top cyber agency and industry officials on Saturday outlined plans to tighten oversight of financial data. (Reuters) 

WSJ Pro's CyberIndex edged up slightly last week, rising 1.7%. The group showed gains despite losses from more than half of the index's participants. Identity security company SailPoint declined 19%.

Data protection company Commvault was the week's biggest winner, rising 7.5%. Palo Alto Networks also had a strong week, gaining more than 5%.

— Jon Leckie

Google on Friday sued a group of scammers it describes as one of the most prolific bad actors in the spamosphere. The company said it is the first case against a defendant employing Google’s Gemini AI model. 

  • Google and law enforcement call the group “Outsider” and say it is sending messages telling people they have mobile-phone-company rewards points to use up. To pressure victims into giving up their account information, they tell them they need to log in immediately before their points expire to claim such things as free headphones or Apple Watches. (WSJ)
 

CISO Moves

Stephen Garcia joined incident-response firm BreachRx as CISO. Garcia was most recently CISO at Napster, an extended-reality tech provider. 

Henrik Smith joined Infoblox, which provides networking tech, as CISO, leaving Amazon after less than two years as head of device security. (Security Boulevard)

 

About Us

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten and James Rundle. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.

 
Share this email with a friend.
Forward ›
Forwarded this email by a friend?
Sign Up Here ›
 
Desktop, tablet and mobile. Desktop, tablet and mobile.
Access WSJ‌.com and our mobile apps. Subscribe
Apple app store icon. Google app store icon.
Unsubscribe   |    Newsletters & Alerts   |    Contact Us   |    Privacy Notice   |    Cookie Notice
Dow Jones & Company, Inc. 4300 U.S. Ro‌ute 1 No‌rth Monm‌outh Junc‌tion, N‌J 088‌52
You are currently subscribed as [email address suppressed]. For further assistance, please contact Customer Service at pro‌newsletter@dowjones.com or 1-87‌7-975-6246.
Copyright 2026 Dow Jones & Company, Inc.   |   All Rights Reserved.
Unsubscribe