Is this email difficult to read? View it in a web browser. ›

The Wall Street Journal ProThe Wall Street Journal Pro

CybersecurityCybersecurity

Sponsored by Zscaler logo.

Lawmakers Scramble to Limit Surveillance Pricing

By Kim S. Nash

 

Hello. The prospect of online retailers setting prices based on detailed profiles of shoppers raises privacy and bias concerns. 

One fear: Even if companies don’t intentionally price based on protected characteristics like race or ethnicity, or age or disability, algorithms can produce the same result. 

So far in 2026, more than 50 bills across more than half of U.S. states have been introduced addressing pricing practices that involve analyzing consumer data through AI or other automated tools. Read more from WSJ.

Also today:

  • DHS director wants 600 more people for CISA
  • CrowdStrike was profitable in the first quarter of the year
  • UnitedHealth stops 450,000 attempted hacks annually
  • Dual U.S.-Iranian national arrested for allegedly supplying tech to Iran's nuclear program
  • And more
 

‏‏‎ ‎

CONTENT FROM: ZSCALER
A 6-Step Approach to Protecting Enterprises From Cyber Risk

As AI models discover software vulnerabilities at machine speed, the question shifts from “Can we patch?” to “How do we reduce blast radius?” In this short video, Jay Chaudhry, CEO Zscaler, explains how to reduce your attack surface, govern AI agents and limit breach impact using a 6-step approach that enterprises can execute in weeks. Take action today.

Watch the video

 

More Cyber News

PHOTO: ERIC LEE/BLOOMBERG

CISA needs 600 more people, Department of Homeland Security Secretary Markwayne Mullin told lawmakers Wednesday. The Cybersecurity and Infrastructure Security Agency, which is part of DHS, would work well with about 2,800 staffers, up from 2,200, he said. Hundreds were cut early in the second Trump administration, which has proposed shrinking CISA's budget again in 2027. (CyberScoop)

Connecticut tightened its 2023 data privacy laws. One amendment makes it easier for residents to opt out of data broker collections. Another lowers the bar for when organizations must disclose breaches to 35,000 state residents affected, from 100,000. (StateScoop)

  • Businesses must also post notices of when they are using facial recognition tech.  
70 seconds

Interval between hacker intrusion attempts at UnitedHealth Group, resulting in 450,000 thwarted cyberattacks annually, the company said in a report to investors.

 

Cyber Business

PHOTO: JASON HENRY FOR WSJ

CrowdStrike raised revenue guidance for the year after swinging to a profit in the first quarter. The cybersecurity company said it now expects total revenue for fiscal 2027 of $5.91 billion to $5.96 billion instead of $5.87 billion to $5.93 billion. For the first quarter, CrowdStrike posted a profit of $27.8 million, compared with a loss of $104.3 million in the same quarter a year earlier. (WSJ)

Cloud-security company Netskope reported a first-quarter loss that ballooned to $116.5 million from $79.2 million a year earlier due to climbing costs. Revenue climbed to $201.6 million, ahead of the $198.2 million analysts expected. (MarketWatch)

Cyber telemetry firm Coralogix raised $200 million in Series F funding led by Advent, CPPIB, and Greenfield. The company is valued at $1.6 billion after the latest round. (SecurityWeek)

 

Enforcement

U.S. officials arrested a dual U.S.-Iranian national on charges of violating sanctions against Iran by supplying encryption equipment and other tech to the country, the Justice Department said. Jamshid Ghomi, who lived in Southern California, led Tehran-based Faraz Pardaz Rayaneh Co. and for 12 years ending in 2023 used personal payment accounts to buy computer gear for his company that eventually made its way to Iran's nuclear program, the Justice Department said. 

A Latvian man who pleaded guilty last year to helping negotiate ransoms in several cyberattacks was sentenced to 8.5 years in U.S. federal prison. Deniss Zolotarjovs worked with other hackers to attack at least 53 businesses and municipalities from June 2021 through March 2023, the Justice Department said. Zolotarjovs received about 10% of the ransom payments extorted, prosecutors said.

 

About Us

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten and James Rundle. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.

 
Share this email with a friend.
Forward ›
Forwarded this email by a friend?
Sign Up Here ›
 
Desktop, tablet and mobile. Desktop, tablet and mobile.
Access WSJ‌.com and our mobile apps. Subscribe
Apple app store icon. Google app store icon.
Unsubscribe   |    Newsletters & Alerts   |    Contact Us   |    Privacy Notice   |    Cookie Notice
Dow Jones & Company, Inc. 4300 U.S. Ro‌ute 1 No‌rth Monm‌outh Junc‌tion, N‌J 088‌52
You are currently subscribed as [email address suppressed]. For further assistance, please contact Customer Service at pro‌newsletter@dowjones.com or 1-87‌7-975-6246.
Copyright 2026 Dow Jones & Company, Inc.   |   All Rights Reserved.
Unsubscribe