Passengers on a UK train service were recently affected by a data breach, while the FBI has warned of ongoing attacks targeting Salesforce accounts. 

JLR is still in deep trouble and a young persistent hacker has recently moved £1.5 billion!

At the same time, certain ChatGPT tools may put private information at risk, and Samsung has patched a critical vulnerability that is actively being exploited.

Here’s the breakdown of these events.

UK Train Operator LNER Warns Customers of Data Breach

London North Eastern Railway (LNER) has warned customers after some personal information may have been accessed illegally. 

Names, emails, phone numbers, and booking details could be at risk. LNER is investigating and urging passengers to stay alert for suspicious emails or messages.

What’s the Implication of this?

Even basic personal data can be misused for scams including phishing or identity theft.

What You Can Do

• Keep an eye on your accounts for unusual activity.
• Change passwords and enable two-factor authentication.
• Ignore unexpected emails claiming to be from LNER unless you’re sure they’re genuine.

FBI Issues Alerts for Attacks on Salesforce Instances

The FBI says criminals are targeting Salesforce accounts, taking advantage of misconfigured systems to steal sensitive business information. Indicators of compromise (IOCs) have been released to help organizations identify potential intrusions.

What’s the Implication of this?

If your company uses Salesforce, a breach could expose client or financial information.

What You Can Do

• Review your Salesforce security settings.
• Monitor account activity for signs of unauthorized access.
• Require two-factor authentication for all users.

Jaguar Land Rover Still Reeling from Cyberattack

Jaguar Land Rover (JLR) is still struggling to restore full manufacturing operations weeks after a major cyberattack. Production remains disrupted, and reports suggest that dealers and suppliers are also suffering knock-on effects, with delays in vehicle deliveries and parts.

What’s the Implication of this?

The prolonged outage shows how deeply cyberattacks can impact critical supply chains. Beyond lost production, dealerships and suppliers are left vulnerable, facing financial strain and reputational risks.

What You Can Do

• Businesses in automotive and manufacturing should strengthen supply chain security.

• Build redundancy into systems to withstand prolonged disruptions.

• Monitor for suspicious communications pretending to be from JLR.

Teen Hacker Spree Costs UK £1.5 Billion

A UK teenager’s hacking spree has been linked to an estimated £1.5 billion in damages across businesses, government systems, and private firms. The attacks highlight how a single individual with technical skills can cause widespread economic harm.

What’s the Implication of this?

Young, unsophisticated but persistent hackers are on the rise. Gaps and vulnerabilities should be patched quickly before they are exploited.

What You Can Do

• Organisations should regularly audit systems for vulnerabilities.

• Educate employees about evolving cyber threats, including insider or opportunistic attackers.

• Invest in proactive cybersecurity measures like threat intelligence and penetration testing.

ChatGPT MCP Tools Pose Risk to Private Data

Some third-party tools for ChatGPT are raising concerns because they may accidentally expose private data if not set up properly. While these tools can be useful, it’s important to handle sensitive information carefully.

What’s the Implication of this?

Even tools meant to help with work or productivity can become a risk if used carelessly.

What You Can Do

• Avoid sharing personal or sensitive information in third-party AI tools.
• Limit permissions and access to these tools.
• Follow the developer’s security advice and updates.

Samsung Patches Actively Exploited Zero-Day

Samsung has released a security update after a zero-day vulnerability was reported by WhatsApp. The flaw could let attackers take control of devices through crafted messages. Anyone using a Samsung device should update immediately.

What’s the Implication of this?

This bug is already being used in attacks. Unpatched devices are at real risk.

What You Can Do

• Update your Samsung device to the latest software.
• Don’t open messages or links you’re not expecting.
• Check for updates regularly to stay protected.

Everything's online now; your money, your photos, your work. That makes cybersecurity a lot more important than it used to be. You can stay safe with a few simple habits: be alert, keep your accounts locked down, and hit "update" when your devices tell you to.

At Cyberkach, we’ll help you do more than just the basics. Our podcasts, webinars, and cyber awareness training are all about making cybersecurity easy to understand and use.

Ready to get ahead of the threats? Join our newsletter for timely tips to keep you safe.