Heathrow total shutdown

Jaguar cyber was overseen by TCS tata consultancy services - familiarise yourself with their failed design on some of the car parts going into (non-jag) cars going into american car market.

Still this rhetoric today of jlr supplier tax payer help (for heathrow too ?) article resumes as ever that jlr made 2bn+ profit and then says we should be buyer of last resort ! from suppliers,
well if we do that, there will be a price mark up of X% before/if we sell them to JLR
 
Are we in a new age of cyber attacks now? Or even warfare you could say, the age of cyber warfare. Seeing all kinds of disruptions now and for months at a time, supermarkets, factories, airports, hospitals, councils etc. and these are obviously just the ones reported, it's a constant bombardment.
 
Last edited:
Are we in a new age of cyber attacks now? Or even warfare you could say, the age of cyber warfare. Seeing all kinds of disruptions now and for months at a time, supermarkets, factories, airports, hospitals, councils etc. and these are obviously just the ones reported, it's a constant bombardment.

We need some deterrence. First time one hand, second time, second hand. TYPE THAT! :D
 
Jaguar cyber was overseen by TCS tata consultancy services
And conveniently, Tata Consultancy Services also works for M&S and Co-op, two other companies that were cyber attacked.

I wonder if TCS were a gateway in all of this.
 
And conveniently, Tata Consultancy Services also works for M&S and Co-op, two other companies that were cyber attacked.

I wonder if TCS were a gateway in all of this.
JLR outsourced different cybersecurity areas to TCS and then made many of the UK team redundant 7 months ago.

Recently, there’s been three major UK ransomware and/or extortion incidents at three big UK companies — Co-op Group, Marks and Spencer and Jaguar Land Rover. One thing connects them all: in the past 5 years, they all outsourced key IT and cybersecurity services to TCS, aka Tata Consultancy Services.

It is well known ithat the LAPSUS$ kids were phoning helpdesks and asking for access, and getting it with ease. TCS provided this helpdesk service, shared across customers.
 
JLR outsourced different cybersecurity areas to TCS and then made many of the UK team redundant 7 months ago.

Recently, there’s been three major UK ransomware and/or extortion incidents at three big UK companies — Co-op Group, Marks and Spencer and Jaguar Land Rover. One thing connects them all: in the past 5 years, they all outsourced key IT and cybersecurity services to TCS, aka Tata Consultancy Services.

It is well known ithat the LAPSUS$ kids were phoning helpdesks and asking for access, and getting it with ease. TCS provided this helpdesk service, shared across customers.
What happens when you outsource your services to a company like TCS.
 
In May, The BBC reported that the Mumbai-based group was carrying out an internal probe to determine whether the hackers, who had caused significant disruption to M&S, had gained access through their systems. In a statement in June, TCS said that none of its systems or users were compromised.

Marking your own homework.
 
What happens when you outsource your services to a company like TCS.

Yep. Indian engineers are famously inept/sketchy. But they keep getting hired because they are cheap. If they had them handling backups as well they are really screwed.

My previous employer had an office in India and they ****** up everything they were given.

It all ends up coming back to the UK when something like this happens. Costs a lot more than just doing it properly to begin with.
 
Last edited:
I doubt you can get insurance for cyber attacks.

For example, terrorism insurance is a government backed scheme. I expect cyber terorism (let’s be real, this is why it is), would require something similar.
 
I doubt you can get insurance for cyber attacks.

For example, terrorism insurance is a government backed scheme. I expect cyber terorism (let’s be real, this is why it is), would require something similar.

It's not "cyber terrorism". The public aren't being terrorised here.

It's industrial espionage. Most likely someone stealing data, but nuking the network on their way out to hide their tracks and do damage.

If this isn't a state sponsored actor (China, Russia), someone has probably been paid to do this. Often it's an inside job.
 
Last edited:
It's not "cyber terrorism". The public aren't being terrorised here.

It's industrial espionage. Most likely someone stealing data, but nuking the network on their way out to hide their tracks and do damage.
Thought there were workers being made redundant due to this? I'd call that affecting the public
 
I doubt you can get insurance for cyber attacks.

For example, terrorism insurance is a government backed scheme. I expect cyber terorism (let’s be real, this is why it is), would require something similar.
IIRC you can and it's a fairly standard extra on business insurance, same as flood cover or insurance to cover the loss of business due to another event (say a fire or whatever).

The problem is, that it does require the business to take it out and like flood cover a lot of businesses (and people*) will not take it out.


*Or don't realise that it's not always part of the standard cover which is somewhat more understandable for residential customers who don't realise that the likes of goompare pretick the "property has never been flooded and has never had subsidence" boxes, than for a business.
 
It's not "cyber terrorism". The public aren't being terrorised here.

It's industrial espionage. Most likely someone stealing data, but nuking the network on their way out to hide their tracks and do damage.

If this isn't a state sponsored actor (China, Russia), someone has probably been paid to do this. Often it's an inside job.

I’d suggest looking up what the legal definition of terrorism is and I’ll leave it at that, it’s different to what you perceive it to be.
 
IIRC you can and it's a fairly standard extra on business insurance, same as flood cover or insurance to cover the loss of business due to another event (say a fire or whatever).

The problem is, that it does require the business to take it out and like flood cover a lot of businesses (and people*) will not take it out.


*Or don't realise that it's not always part of the standard cover which is somewhat more understandable for residential customers who don't realise that the likes of goompare pretick the "property has never been flooded and has never had subsidence" boxes, than for a business.

IT sec provided by India and no insurance against cyber attacks is meme levels of stupidity. Especially for a company with a footprint that large.

I hope it was worth it. Any profit they made over the past few years is basically gone.

Waiting for the "Trainwreck" episode...
 
Last edited:
You can absolutely buy cyber insurance, the good stuff will be standalone policies.

All levels from business interruption and third party liability, to specialist response services and PR management etc.

A company like JLR not having it is mind blowing.
 
Last edited:
Hadn't appreciated tata consultancy used by jlr, are implicated in M&S attack, a potential 'inside' job - where there is blame .....

M&S said the hackers who had accessed its systems via a “third party” – a company working alongside it – rather than via a direct attack. According to reports from the BBC, Tata Consultancy Services (TCS) is therefore conducting its own internal investigation, to determine whether it was the gateway for the cyber-attack on M&S.

direct profit losses of 5M a day at JLR still small versus 2+BN profit
 
Back
Top Bottom