Good day. We’re bringing you coverage from a Dow Jones Risk Journal conference at Journal House in Singapore this week, along with our regular news.

David Koh, chief executive and commissioner of cybersecurity for the Cyber Security Agency of Singapore, discussed how the city-state’s critical infrastructure came under sustained attack from a China-linked threat group, UNC3886. Publicly attributing the attacks was a deliberate defensive measure, he said.

Frankie Shuai, chief information security officer for the Asia-Pacific region at DWS Group, the asset management subsidiary of Deutsche Bank, said businesses are seeing threats from both cyber attackers seeking financial gain as well as from those trying to advance political positions.

When a European country or the U.S. over the past few years has announced support for Ukraine in its war with Russia, there has been a noticeable spike in distributed denial-of-service—or DDoS—attacks afterward in those allied countries, he said.

Read our full story here.

Also today:

• Information-sharing law expiry raises significant concerns.
• Louisiana group sues government over data lake.
• Allianz Life details breach extent.

The collapse of congressional efforts to renew decade-old legal protections for sharing cyberattack intelligence between the private sector and the U.S. government leaves a dangerous gap in the nation’s cybersecurity defenses, experts say.

The 2015 Cybersecurity Information Sharing Act, or CISA—which expired early Wednesday after weeks of partisan gridlock and amid a government shutdown—sought to encourage organizations to provide information on new threats to cybersecurity teams in Washington. Among other protections, the legislation set guardrails to shield companies from antitrust and liability charges.

Sharing cyberattack data is seen as a core strategy for preventing Chinese, Russian and other state-sponsored hackers from burrowing deeper into U.S. infrastructure.

Without legal protections, private-sector companies are now more likely to withhold critical attack information, leaving potential vulnerabilities exposed, cybersecurity experts say. “You’ll see information sharing almost cease to exist overnight,” said Tony Monell, public-sector vice president at cybersecurity firm Black Kite and a former senior cyber policy adviser for critical and emerging technology in the Office of the Secretary of Defense.

Read our full story here.

Credera Client Data Reportedly Stolen in Breach. Hackers allege they accessed sensitive information from Credera, reportedly including client documents, SQL files and private certificate keys tied to major firms such as Mercedes and AT&T. (CyberNews)

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten, James Rundle and Catherine Stupp. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.