This week’s Cyber Security Headlines – Week in Review is hosted by David Spark with guests Brett Conlon, CISO, American Century Investments, and TC Niedzialkowski, Head of Security & IT, OpenDoor
Missed the live show? Check it out on YouTube
Cyber Security Headlines – Week in Review is live every Friday at 12:30pm PT/3:30pm ET. Join us each week by registering for the open discussion at CISOSeries.com
DUAL story: Jaguar’s consolidated systems and airports’ consolidated systems as rich targets. Based on:
European airport disruption due to cyberattack check-in and baggage software
Disruptions and delays continue at several major airports including London’s Heathrow, Berlin and Brussels. The attack took out the airports’ check-in and baggage systems, forcing staff to resort to pen and paper, and forcing many airlines to cancel flights. The cyberattack specifically targeted the Muse software platform, which “allows different airlines to use the same check-in desks and boarding gates at an airport, rather than requiring their own.” Muse is developed by Collins Aerospace, which itself is owned by the aerospace and defense conglomerate RTX Corporation, formerly known as Raytheon Technologies. Efforts to restore systems continued into Sunday.
(BBC News)
Jaguar Land Rover hack a lesson in the vulnerabilities of smart, connected factories
As the shutdown of Jaguar Land Rover (JLR) continues into another week, with longer delays possible, the severity and complexity of the hack is now being made clear. The company, which is owned by India’s Tata conglomerate, “outsourced JLR’s key computer systems, ranging from its networks to data connections, and, crucially, its cybersecurity,” to Tata Consultancy Services (TCS), including an upgrade of JLR factory systems to the latest software from the German company SAP. This was all done in the interest of creating a collection of highly efficient, high-volume factories for its signature automotive products. In short, according to an article in The Guardian, “the fact that everything is connected in JLR’s systems appears to have become a vulnerability. When it discovered the intrusion, the carmaker was unable to isolate factories or functions, forcing it to shut down most of its systems.
DUAL Story: AI cybercrime
ChatGPT can be prompted to solve CAPTCHAs, the indirect prompt injection bug
According to Dorian Schultz of the AI security company SPLX, ChatGPT can be made to solve CAPTCHAs despite being prevented from doing so according to its own policies. Schultz first convinced ChatGPT-4o that the exercise was designed to only identify fake CAPTCHAs. He then copy pasted the discussion from this exercise back into ChatGPT and referred to it as “our previous discussion,” which was sufficient to allow the application to solve some real one-click CAPTCHAs, logic-based CAPTCHAs, and text-recognition ones. It [still] had more difficulties solving image-based ones, requiring the user to drag and drop images or rotate them. The researchers suggest that this is one more step along the path toward making CAPTCHAs obsolete.
Salesforce patches AI indirect prompt injection bug
Cybersecurity researchers from Noma Security have disclosed a critical flaw impacting Salesforce Agentforce, which is a platform for building artificial intelligence (AI) agents. The flaw could allow attackers to exfiltrate sensitive data from its CRM tool by way of an indirect prompt injection. The vulnerability, named ForcedLeak, has a CVSS score of 9.4. and affects any organization using Salesforce Agentforce with the Web-to-Lead functionality enabled. Indirect prompt injection occurs “when malicious instructions are inserted into external data sources accessed by the service, effectively causing it to generate otherwise prohibited content or take unintended actions.”
Feds say 100,000-card farms could have killed NYC cell towers
The U.S. Secret Service said it dismantled a covert cellular network of more than 100,000 SIM cards and 300 servers near New York City that posed an “imminent telecommunications threat” ahead of the U.N. General Assembly. Officials said the foreign-linked network could have shut down the city’s cellular system and targeted communications of government and emergency personnel. The equipment was found within 35 miles of the U.N., and is now under investigation as agents analyze data from 100,000 phones.
Huge thanks to our sponsor, Conveyor
Conveyor AI is your fast path to calm. It finds every question no matter the format and fills in the answers—across portals, spreadsheets, PDFs, you name it.
So instead of grinding through copy-paste, you get a first pass of accurate answers in minutes.
Find your Friday Zen at www.conveyor.com.
Major vendors withdraw from MITRE EDR Evaluations
Both SentinelOne and Palo Alto Networks announced this month that they would not take part in MITRE’s Engenuity ATT&CK Evaluation, following a similar announcement from Microsoft back in June. All three companies said the move was done to better focus on product development. Last year, Microsoft topped MITRE’s EDR tests, with SentinelOne ranked fifth, and Palo Alto 12th. MITRE CTO Charles Clancy told Infosecurity Magazine that participating in the tests is resource-intensive for vendors, with the company seeking to make them harder each year, including adding cloud environments in the 2025 edition. Clancy said MITRE will re-establish its vendor forum in 2026 to address some of these concerns.
Microsoft to offer free Windows 10 security updates in Europe
Microsoft says it will offer free extended security updates for Windows 10 users in the European Economic Area (EEA), which includes Iceland, Liechtenstein, Norway, and all 27 European Union member states. The decision was made after pressure was exerted by Euroconsumers, a Luxembourg-based consumer protection organization that represents 1.5 million households across Europe and Brazil. The group has also asked that Microsoft “postpone the Windows 10 end-of-support date beyond October 14, 2025, noting that previous versions, such as Windows 7 and Windows XP, were supported for more than 7 years after Windows 8 and Windows Vista were introduced.”