Is this email difficult to read? View it in a web browser. ›

The Wall Street Journal ProThe Wall Street Journal Pro

CybersecurityCybersecurity

Sponsored by Zscaler logo.

Russia-Ukraine War Brings Digital Attacks to European Allies

By Kim S. Nash

 

Hello. This week’s biannual gathering of NATO foreign ministers comes in the middle of peace talks over Ukraine that have prompted many European leaders to question whether Washington’s priorities are still aligned with those of Europe.

The U.S. appears to be thinking short-term about ending the war between Russia and Ukraine but Europe is worried about the next war, one Russia expert says.

Unlike the U.S., Europe is being subjected to a campaign of hostile tactics from Russia, including cyberattacks, drone incursions and incidents involving the cutting of undersea internet cables. Read more from WSJ. 

More news: 

  • U.S. shares of South Korea's Coupang drop after breach
  • New York City gets aggressive in AI regulation
  • Law enforcement probe of Oracle Health hack slowed patient notifications
  • Companies don't monitor suppliers' cybersecurity very often
  • And more
 

‏‏‎ ‎

CONTENT FROM: ZSCALER
Is Your Cybersecurity Ready for AI?

AI is a risk multiplier, exploiting weaknesses in legacy systems like firewalls and VPNs at machine speed. Zscaler CEO Mr. Chaudhry and WSJ’s Ms. Mirchandani emphasize the urgency to act—Zero Trust + AI is essential to protect data, AI models and agents. Don’t let outdated architectures leave you vulnerable—embrace Zero Trust + AI now to stay resilient against evolving threats.

Watch the 3-minute video

 

More Cyber News

Coupang had been having a pretty good year, but that looks set to change after a huge data leak sent its U.S.-listed stock lower. The breach affected 33.7 million customer accounts. Someone gained unauthorized access to customer information from June of this year up until recently, including names, email addresses, phone numbers, and certain order information, according to the company. Login details and payment information weren’t exposed. (Barron's) 

Aggressive AI laws enacted in New York City. The GUARD Act sets mandatory standards for the city's use of AI, creates an office to enforce them, and requires a public list of the AI tools used by city agencies and offices. (StateScoop)

  • The move comes as Washington is trying to block state and local governments from regulating AI for 10 years, leaving it up to the federal government to rein in use of the technology. 
  • Further reading from WSJ Pro: States Notch Victory Over 10-Year AI Law Ban

East Coast medical provider ChristianaCare is notifying patients that their personal and medical information was stolen in a cyberattack in January on a third-party vendor that handled data for Oracle's electronic health record system. At risk is data that includes names, Social Security numbers, treatment details, images and other information, ChristianaCare said. The incident and investigation has played out for months: 

  • Jan. 22: Hack of Oracle Health's vendor occurs
  • April: Oracle informs ChristianaCare of the breach
  • Sept. 29: Oracle provides ChristianaCare with a list of patients whose information might have been involved
  • November: ChristianaCare notifies patients

Oracle Health, formerly known as Cerner, said it delayed revealing the incident at the request of law enforcement. 

 

Enforcement: A cryptocurrency mixing service used by ransomware hackers is out of operation after a raid by German and Swiss police in late November. Cryptomixer servers and its domain name were seized, Europol said Monday. Officers also confiscated bitcoin worth more than 25 million euros, or about $29 million. The service has mixed more than $1.5 billion in crypto since 2016, Europol said.

  • North Korean hackers have used Cryptomixer, according to crypto-research firm TRM Labs. (Cybersecurity Dive)
70%

Percentage of 1,062 cyber professionals who say they are very or extremely concerned about supply-chain risk, according to a survey by cybersecurity training group ISC2. 

How often do these organizations review suppliers' cyber practices? 

Annually: 45%

Quarterly: 17%

Monthly: 12%

Semi-annually 10%

Only during onboarding: 9%

Other: 5%

Never: 3%

 

 

From Dow Jones Risk Journal

PHOTO: WOJTEK RADWANSKI/AGENCE FRANCE-PRESSE/GETTY IMAGES

Outlook for Russian hybrid operations in 2026. Moscow’s hybrid warfare campaign has intensified this year. The number of operations recorded by September had already surpassed that for all of 2024. Irrespective of the outcome of the war in Ukraine, the Kremlin probably considers hybrid warfare as a means to confront the West, aimed at countering the perceived existential threat represented by NATO. Read the full analysis.

 

About Us

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten and James Rundle. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.

 
Share this email with a friend.
Forward ›
Forwarded this email by a friend?
Sign Up Here ›
 
Desktop, tablet and mobile. Desktop, tablet and mobile.
Access WSJ‌.com and our mobile apps. Subscribe
Apple app store icon. Google app store icon.
Unsubscribe   |    Newsletters & Alerts   |    Contact Us   |    Privacy Notice   |    Cookie Notice
Dow Jones & Company, Inc. 4300 U.S. Ro‌ute 1 No‌rth Monm‌outh Junc‌tion, N‌J 088‌52
You are currently subscribed as [email address suppressed]. For further assistance, please contact Customer Service at pro‌newsletter@dowjones.com or 1-87‌7-975-6246.
Copyright 2025 Dow Jones & Company, Inc.   |   All Rights Reserved.
Unsubscribe