Is this email difficult to read? View it in a web browser. ›

The Wall Street Journal ProThe Wall Street Journal Pro

CybersecurityCybersecurity

Sponsored by Zscaler logo.

States Rebuff Proposed Federal Ban on AI Laws

By Kim S. Nash

 

Hello. Texas state lawmakers this week passed legislation governing the use of artificial intelligence, forging ahead as the federal government seeks to block state-level AI regulation.

The Texas bill, which now goes to Gov. Greg Abbott, aims to boost the state’s data-privacy protections, among other measures. Also this week, more than 250 lawmakers from all 50 states voiced “strong opposition” to a measure tucked into the Trump administration’s budget megabill that would impose a 10-year ban on state AI laws, in a letter to members of the House and Senate. Read our story. 

More news:  

  • OpenAI says China has tried to use ChatGPT for cyber threats 
  • German telecom company Vodafone fined $81 million for fraud, privacy and security violations
  • Rubrik beats revenue targets 
  • Cellebrite to buy Corellium 

Plus: I recommend a piece of weekend reading on the painful recollections of Maersk's former tech chief from dealing with the 2017 NotPetya scourge.   

 

‏‏‎ ‎

CONTENT FROM: Zscaler
Why Ransomware is Winning Despite Billions Spent on Security

Like a bank robbery, ransomware attacks find weaknesses, break in, move laterally, and steal or encrypt data. Attacks succeed because companies rely on firewalls as their primary defense. Firewalls expose public IPs, inviting attacks. Once breached ransomware quickly spreads. Zscaler CEO Jay Chaudhry shares insights on how embracing Zero Trust AI stops ransomware at all four stages of an attack.

Watch Now

 

More Cyber News

PHOTO: FLORENCE LO/REUTERS

OpenAI said it had disrupted several attempts to leverage its AI models for cyber threats and covert influence operations that likely originated from China. While misuse occurred in several countries, OpenAI said it believes a “significant number” of violations came from China, noting that four of 10 sample cases included in its latest report likely had a Chinese origin. (WSJ)

German telecom company Vodafone drew a fine of $51 million from the country's data watchdog for privacy and cyber missteps. Vodafone business partners scammed customers into signing fake contracts, the watchdog said. It assessed another $30 million fine for not properly securing its app and customer-service processes, which allowed hackers to steal customer eSIM data. (Bleeping Computer)

“There’s old tech, there’s tech that wasn’t built to be connected to the internet to be accessible, and there’s still less cybersecurity for operational systems than there are for IT systems.”

— Anne Neuberger, former deputy national security advisor for cybersecurity and emerging technology in the Biden era, explaining why no part of U.S. critical infrastructure can't be brought down by hackers (NextGov)

👉 Weekend reading: Remember the NotPetya ransomware attack of 2017? The global spread of that particularly damaging malware marked a turning point in how businesses perceived the hacker threat, from both the victim's and cyber insurer's points of view. Worldwide shipper Maersk was harder hit than many companies. Former Global Group Chief Technology and Information Officer Adam Banks recalls some of the more painful moments and resonant lessons in InfoSecurity Magazine. 

5,000

Number of internet hosting accounts breached by a hacker who used them to mine for crypto since 2018, according to Ukrainian police who arrested the suspect. He faces up to 15 years in prison. (Bleeping Computer)

 

Cyber Business

  • Rubrik on Thursday reported first-quarter revenue of $278.5 million, up 49% from $187.3 million for the same period a year ago. The company narrowed its net loss for the quarter to $102.1 million from $732.1 million a year ago. For the full year, Rubrik forecast revenue of $1.18 billion to $1.19 billion. 
  • Forensic investigation company Cellebrite said it plans to buy virtualization tech provider Corellium. Both companies focus on figuring out what is on mobile and internet-connected devices, including identifying vulnerabilities. The deal is valued at $200 million. 
 

Executive Insights

Our weekly roundup of stories from across WSJ Pro that we think you'll find useful

  • Morgan Stanley has built its own AI tool to help modernize its legacy code—something it says existing tools on the market still struggle with.
  • After last year’s relative calm, U.S. companies are now dealing with rising logistics costs, supply-chain upheaval and uncertain consumer demand.
  • Private equity is feeling the heat as buyout fund backers look for cash returns while firms hold tens of thousands of unsold companies.

Climate startups are seeing the impact of President Trump’s attacks on the energy-transition sector, as funding and job cuts, operational halts and bankruptcies rack up.

 

About Us

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten, James Rundle and Catherine Stupp. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.

 
Share this email with a friend.
Forward ›
Forwarded this email by a friend?
Sign Up Here ›
 
Desktop, tablet and mobile. Desktop, tablet and mobile.
Access WSJ‌.com and our mobile apps. Subscribe
Apple app store icon. Google app store icon.
Unsubscribe   |    Newsletters & Alerts   |    Contact Us   |    Privacy Notice   |    Cookie Notice
Dow Jones & Company, Inc. 4300 U.S. Ro‌ute 1 No‌rth Monm‌outh Junc‌tion, N‌J 088‌52
You are currently subscribed as [email address suppressed]. For further assistance, please contact Customer Service at pro‌newsletter@dowjones.com or 1-87‌7-975-6246.
Copyright 2025 Dow Jones & Company, Inc.   |   All Rights Reserved.
Unsubscribe