Is this email difficult to read? View it in a web browser. ›

The Wall Street Journal ProThe Wall Street Journal Pro

CybersecurityCybersecurity

Sponsored by Zscaler logo.

Captive Scam Workers in Cambodia Couldn’t Flee as Bombs Fell

By Kim S. Nash

 

Hello. Foreign laborers being held against their will in Cambodia to run online scams were forced to keep working even as Thai military attacks on the disputed border area intensified this month, according to witnesses and videos.

An estimated 150,000 people, mostly from Asia and Africa, have been trafficked to Cambodia by criminal gangs, say rights groups and cybercrime researchers. Many of these laborers have been held in compounds on the border with Thailand, forced to deliver on online romance, investment and other scams. Read the full WSJ story. 

More news below. 

Note to readers: The WSJ Pro Cybersecurity newsletter will be on break until Jan. 2. Enjoy the winter holidays!

 

‏‏‎ ‎

CONTENT FROM: ZSCALER
How Agentic AI Is Changing the Security Playbook

AI is a risk multiplier, exploiting weaknesses in legacy systems like firewalls and VPNs at machine speed. Zscaler CEO Mr. Chaudhry and WSJ’s Ms. Mirchandani emphasize the urgency to act—Zero Trust + AI is essential to protect data, AI models and agents. Don’t let outdated architectures leave you vulnerable—embrace Zero Trust + AI now to stay resilient against evolving threats.

Watch the 3-minute video

 

More Cyber News

PHOTO: DAVID PAUL MORRIS/BLOOMBERG

AI software company ServiceNow said it plans to buy cyber startup Armis in a $7.75 billion deal expected to close in late 2026. Armis in November raised $435 million in a funding round that valued it at $6.1 billion, and it had been planning for an initial public offering at the end of 2026 or early 2027. 

  • Armis makes security tools for operational and industrial tech such as medical devices. ServiceNow has been working to build up its security products.

City coffers in Middletown, Ohio, haven't received water payments from residents since mid-August, when a cyberattack disrupted certain municipal tech systems. The city council voted to transfer $800,000 to cover missing water revenue that normally is distributed to garbage collection and regional transportation. Water revenue systems are expected to be recovered in January and residents' payments collected since the hack will be used to repay the $800,000. (WCPO)

Romania's water facility targeted: Administrative functions at Romania's main water-processing facility have been knocked offline after a ransomware attack on Dec. 20. About 1,000 servers, databases and other information-technology devices were compromised, the National Directorate of Cyber ​​Security, the country's top cyber agency, said.

  • No operational technology was hit and the water supply remains flowing and safe, the agency said. 
  • The hackers used BitLocker encryption tools and have demanded a ransom, which the water administration has been advised not to pay. Government and private-sector officials are investigating the incident.

PHOTO: RICH PEDRONCELLI

/AP

Sutter Health agreed to pay $21.5 million to settle a class-action lawsuit over alleged data-privacy violations. People who used Sutter's patient portal login webpage from June 2015 to March 2020 had their personal information shared with third-parties, the suit claimed. 

  • Sutter has denied the allegations.
  • The California healthcare chain is expected to pay each qualified claimant up to $90​.
  • Patients' lawyers are due to receive more than $7 million.
 
Alt text.

🎧 The Dow Jones Risk Journal Podcast is coming in January. Get an early listen now on Apple Podcasts.

In this episode, we look at a dispute over enforcement of a U.S. law meant to prevent the import of goods made with forced labor in China. Also: challenges for compliance officers in establishing best practices for using AI.

Listen Now

South Korea plans to test mandatory mobile facial recognition. Starting in March, South Koreans setting up new mobile phone numbers must register them with facial scans in an effort to curb scams, government officials said. Carriers KT, LG Uplus and SK Telecom will use PASS, an identification app they jointly built. (Yonhap News Agency)

 

About Us

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten and James Rundle. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.

 
Share this email with a friend.
Forward ›
Forwarded this email by a friend?
Sign Up Here ›
 
Desktop, tablet and mobile. Desktop, tablet and mobile.
Access WSJ‌.com and our mobile apps. Subscribe
Apple app store icon. Google app store icon.
Unsubscribe   |    Newsletters & Alerts   |    Contact Us   |    Privacy Notice   |    Cookie Notice
Dow Jones & Company, Inc. 4300 U.S. Ro‌ute 1 No‌rth Monm‌outh Junc‌tion, N‌J 088‌52
You are currently subscribed as [email address suppressed]. For further assistance, please contact Customer Service at pro‌newsletter@dowjones.com or 1-87‌7-975-6246.
Copyright 2025 Dow Jones & Company, Inc.   |   All Rights Reserved.
Unsubscribe