Is this email difficult to read? View it in a web browser. ›

The Wall Street Journal ProThe Wall Street Journal Pro

CybersecurityCybersecurity

Sponsored by Zscaler logo.

Can Chinese-Made Buses Be Hacked? Norway Drove One Down a Mine to Find Out

By Kim S. Nash

 

Hello. The growing prevalence of Chinese technology in Europe’s infrastructure is stoking security concerns across the region.

An experiment in Oslo determined that even deep inside of a decommissioned mine, a Chinese-made bus could be hacked through a built-in kill switch. Now Denmark and the U.K. are doing their own tests of Chinese vehicles and worries abound about solar panels and other devices. Read the full WSJ story.

More news below.

 

‏‏‎ ‎

CONTENT FROM: ZSCALER
Leading CIOs Transform Cyber Defense With Zero Trust + AI

AI is transforming the threat landscape, exploiting weaknesses in traditional security architectures like firewalls and VPNs at groundbreaking speeds. Zscaler CEO Mr. Chaudhry and WSJ’s Ms. Mirchandani stress the urgency of adopting Zero Trust + AI—the foundation for protecting data, AI assets and systems from ever-evolving risks. Legacy systems won’t secure the future; Zero Trust + AI will.

Watch the 3-minute video

 

More Cyber News

PHOTO: ERIC KERR

Eric Kerr left the FBI in 2023 but kept searching for Conspirator 1, who allegedly targeted a Kansas hospital in a ransomware attack. Kerr and his former co-investigator, Caleb Marquis, (pictured) spent four years hunting down the suspected North Korean spy, who went by the name Hades. The ransomware Hades used was something the FBI had never seen. (WSJ)

President Trump is restarting attacks on states trying to regulate artificial intelligence, calling for Congress to pre-empt such laws while weighing an executive order that would target states with what he thinks are restrictive regulations. Read the WSJ explainer. 

Feds want to play offense against hackers: Are businesses ready to help them? The fast-growing sophistication and frequency of cyberattacks is building a consensus around the need to go on the offensive against global hackers. Not all companies are ready or willing to shift from defense to offense. Read more at Dow Jones Risk Journal.

Funding: Tel Aviv-based startup Guardio raised $80 million in a round led by ION Crossover Partners. Guardio makes tools for finding vulnerabilities in AI-generated code. (TechCrunch)

Healthcare breaches:

  • Vienna, Va.-based Personic Management, the parent company of in-home wound-care service Personic Health, said hackers stole the personal and medical data of 10,929 patients in August. 
  • Doctors Hospital at Renaissance, which runs medical facilities across Texas, said a March cyberattack that disrupted healthcare services also compromised data for more than 33,600 patients. That includes treatment and insurance information. 
  • Conduent Business Services, which provides Medicaid claims processing and other functions, disclosed that hackers were in the network of its state and local government unit from Oct. 21, 2024, to Jan. 13, 2025. More than 42,600 people had their personal and health data breached, according to a notice filed with the U.S. Department of Health and Human Services.
  • Officials in Kaufman County, Texas, are notifying 130,000 current and former residents and employees that an Oct. 20 cyberattack exposed their personal and health data. Also affected are people involved in guardianship matters, criminal cases and others. 
41%

Percentage of nearly 3,900 business and tech executives globally who are prioritizing changes to the location of their critical infrastructure as one hedge against geopolitical risks, according to a survey from PricewaterhouseCoopers. 

 

Enforcement

PHOTO: ANTHONY DEVLIN/ZUMA PRESS

Settlement: Omni Family Health, which runs 39 facilities in California, agreed to pay $6.5 million to settle a class-action lawsuit over a February 2024 cyberattack in which hacking group Hunters International stole data about 468,344 current and former patients and employees. Attorneys will be awarded about $2.2 million of the fund. (HIPAA Journal)

Suspected Russian ransomware infrastructure group sanctioned by the U.S., U.K. and Australia. Media Land, a bulletproof hosting service based in St. Petersburg, has enabled ransomware attacks by LockBit and BlackSuit, among others, according to a coordinated sanctions action Wednesday. Media Land has also launched distributed denial-of-services attacks against U.S. organizations, an FBI investigation found. 

 

About Us

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten and James Rundle. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.

 
Share this email with a friend.
Forward ›
Forwarded this email by a friend?
Sign Up Here ›
 
Desktop, tablet and mobile. Desktop, tablet and mobile.
Access WSJ‌.com and our mobile apps. Subscribe
Apple app store icon. Google app store icon.
Unsubscribe   |    Newsletters & Alerts   |    Contact Us   |    Privacy Notice   |    Cookie Notice
Dow Jones & Company, Inc. 4300 U.S. Ro‌ute 1 No‌rth Monm‌outh Junc‌tion, N‌J 088‌52
You are currently subscribed as [email address suppressed]. For further assistance, please contact Customer Service at pro‌newsletter@dowjones.com or 1-87‌7-975-6246.
Copyright 2025 Dow Jones & Company, Inc.   |   All Rights Reserved.
Unsubscribe