Daily Briefing for 09.03.25

Top stories.

1. Jaguar Land Rover "severely disrupted" by cyberattack.
2. Cloudflare impacted by Salesloft Drift breach.
3. CISA names Nicholas Andersen as Executive Assistant Director of Cybersecurity.

Jaguar Land Rover "severely disrupted" by cyberattack.

Jaguar Land Rover (JLR) sustained a cyberattack over the weekend that disrupted its retail and manufacturing operations. The automobile manufacturer said in a brief statement, "We took immediate action to mitigate its impact by proactively shutting down our systems. We are now working at pace to restart our global applications in a controlled manner. At this stage there is no evidence any customer data has been stolen but our retail and production activities have been severely disrupted."

The company hasn't disclosed the nature of the attack, but SecurityWeek notes that the company's response suggests ransomware may have been involved. The BBC reports that JLR shut down vehicle production at its two main UK plants following the incident. The BBC points out that the attack took place the day before new registration plates became available on September 1st, which may have been intentional on the part of the attackers.

Cloudflare impacted by Salesloft Drift breach.

Cloudflare has disclosed that it was affected by the Salesloft Drift breach, resulting in attackers exfiltrating data from the company's Salesforce instance. The company stated, "Most of this information is customer contact information and basic support case data, but some customer support interactions may reveal information about a customer's configuration and could contain sensitive information like access tokens. Given that Salesforce support case data contains the contents of support tickets with Cloudflare, any information that a customer may have shared with Cloudflare in our support system—including logs, tokens, or passwords—should be considered compromised, and we strongly urge you to rotate any credentials that you may have shared with us through this channel."

CISA names Nicholas Andersen as Executive Assistant Director of Cybersecurity.

The US Cybersecurity and Infrastructure Security Agency (CISA) has appointed Nicholas Andersen as Executive Assistant Director of Cybersecurity, CyberScoop reports. Andersen most recently served as President and COO at Invictus International Consulting, and held posts in the Department of Energy’s Cybersecurity, Energy Security, and Emergency Response division under the first Trump administration.

CyberScoop notes that CISA's Executive Assistant Director of Cybersecurity role has "seen swift turnover in the past year," and was previously held by Chris Butera in an acting capacity.