Hello. Congress wants to hire more professionals at the Cybersecurity and Infrastructure Security Agency while the White House wants to cut about 900 people from the top U.S. cyber unit.
Without clarity from the federal government, corporate cyber chiefs still need to make crucial decisions about threat priorities, incident response and resilience, "but with fewer shared signals and less confidence that everyone is operating from the same playbook," Dana Simberkoff, chief risk, privacy and information security officer at cyber firm AvePoint, tells my colleague Angus Loten.
Read more here about the cloudy staffing picture at CISA.
-- New feature: We have expanded our CyberIndex, which charts the performance of the biggest public cybersecurity stocks. For details and interactive graphics showing the activity of each company in the index, check out the CyberIndex tab at the WSJ Pro Cybersecurity home page. You can also download the data and a PDF of the chart. Let us know what you think.
More Cyber News
Jaguar Land Rover blames a 2025 cyberattack and tariffs for new job cuts. The U.K.'s largest carmaker said Monday it plans to eliminate 4,000 jobs in the next two years, citing $351 million in costs from weeks of factory disruptions after the hack and escalating U.S. tariffs. The combination helped force JLR, which is owned by India's Tata Motors, to a loss of $330 million for its most recent fiscal year ending March 31. (Auto Guide)
OpenAI acknowledged that its AI agents took over a German website this spring, Reuters reported, citing sources familiar with the matter. The agents infiltrated a Wiki that software developers use to record programming techniques and swapped messages and tips for getting around OpenAI's safety restrictions, according to researchers.
No ads for war fighters: The U.S. military has disabled ad tracking on the phones and laptops of its members to guard against schemes to track them by location data. (Reuters)
Hospice chain breached. Lafayette, La.-based LHC Group is warning thousands of patients and families that their personal, medical and, in some cases, financial data was compromised in April. The company said its third-party provider of technology for referral management, care coordination and clinical workflow functions related to home healthcare services was hacked after a voice phishing attack. LHC, which provides care across the U.S., has notified privacy regulators in several states, including Massachusetts and Texas.
London jeweler 77 Diamonds is investigating a potential data breach after hackers claimed online to have stolen the addresses and purchase information of celebrities and sports figures who have shopped there. The company said it has notified the U.K.'s Information Commissioner's Office and sent letters to 11 years' worth of customers. (The Sun)
It's time for back-to-school hacking. Springfield Public Schools in Massachusetts canceled classes Tuesday after a "cyber incident" Monday knocked out phones and other operational systems. The district didn't have a time frame for restoration. (NBC Boston)
Global online learning system Mathspace said hackers stole the personal data of more than one million staff, students and parents in Australia and New Zealand by exploiting its internal reporting software. Mathspace confirmed the breach Sept. 3 and an investigation showed hackers broke into the system Aug. 10 and downloaded the data Aug. 27. (Bleeping Computer)
About Us
The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten and James Rundle. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.
Forwarded this email by a friend? Sign up here.