Hello. I am still receiving messages on email and LinkedIn (in this thread) about problems in the process of hiring cybersecurity professionals. I appreciate and read off of these notes. 

I'm especially interested in hearing from people who are trying to find jobs, either those established in the field or looking to break into it. If this is you, reply to this newsletter or email me about what you're seeing and have experienced.

If you haven't seen last week's article rounding up reader responses, check out The Cybersecurity Talent Shortage: WSJ Readers Dissect the Problem.

The more we talk about the mismatch of expectations on both sides, the better chances we have to fix things.

Also today: 

• OpenAI's 'malicious uses' report
• Two federal agencies barred from giving personal data to Elon Musk's team
• Military shipbuilder discloses two-year-old breach
• Skybox Security shuts down, and other vendor news
• And more

DOGE temporarily thwarted: A federal judge on Monday blocked the Education Department and Office of Personnel Management from releasing personal data to the Department of Government Efficiency. 

• The temporary restraining order by U.S. District Judge Deborah Boardman in Maryland came as part of a case brought by the American Federation of Teachers, the National Active and Retired Federal Employees Association and the International Association of Machinists and Aerospace Workers against the Trump administration. (Associated Press)

Australia banned Russia's Kaspersky software from government systems, joining the U.S., which enacted similar measures in June 2024, as well as Canada and the U.K. (TechCrunch)

Military shipbuilder Trident Maritime Systems is notifying an undisclosed number of people that their private data was exposed during a hack two years ago. Names, Social Security numbers and dates of birth were compromised, the Arlington, Va.-based company said in a notice filed with state regulators and posted on its website. 

• Austin, Texas-based NinjaOne said it raised $500 million in Series C extensions led by ICONIQ Growth and Alphabet's CapitalG. The investment values NinjaOne at $5 billion. The company, founded in 2013, focuses on endpoint security and patch management. (SecurityWeek)

• RAD Security, a San Francisco-based startup that offers cloud- and AI-protection tools, raised $14 million in a Series A round led by Cheyenne Ventures. 

• Shut down: Israeli cyber company Skybox Security said Monday it is shutting down and has laid off 300 employees in Israel and the U.S. Skybox has sold its technology and customer base to Tufin, which specializes in managing network security policies. Terms weren't disclosed. Tufin, based in Boston, urged Skybox customers to complete a form on its website to start the tech-transition process. (CalcalisTech)

The WSJ Pro Cybersecurity team is Deputy Editor Kim S. Nash (on X @knash99), reporter James Rundle and reporter Catherine Stupp (@catstupp). Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.