Blacknote Intelligence Insightshttps://www.blacknote-intelligence.com/insights/Cyber attacks and data breaches explained.en-gbThe 2026 law firm breach wave: one convincing message is all it takeshttps://www.blacknote-intelligence.com/insights/law-firm-data-breaches-2026https://www.blacknote-intelligence.com/insights/law-firm-data-breaches-2026Sun, 25 Oct 2026 09:00:00 GMTJones Day, Herbert Smith Freehills Kramer, Quinn Emanuel, Greenberg Traurig and others disclosed breaches in 2026. Most began with social engineering. What UK law firms should do now.Silent Ransom Group: the fake IT call that law firms keep answeringhttps://www.blacknote-intelligence.com/insights/silent-ransom-group-law-firmshttps://www.blacknote-intelligence.com/insights/silent-ransom-group-law-firmsSun, 25 Oct 2026 09:00:00 GMTThe FBI has warned twice about Silent Ransom Group, which phones law firm staff posing as IT support and steals data for extortion. How the attack works and how to stop it.ShareLeak and PipeLeak: how a web form can turn your AI agent against youhttps://www.blacknote-intelligence.com/insights/ai-agent-prompt-injection-copilot-agentforcehttps://www.blacknote-intelligence.com/insights/ai-agent-prompt-injection-copilot-agentforceSun, 25 Oct 2026 09:00:00 GMTResearchers showed that text typed into a public form could make Microsoft Copilot Studio and Salesforce Agentforce agents email out customer data. What organisations using AI agents should change.Jaguar Land Rover: five weeks offline and the UK's costliest cyber attackhttps://www.blacknote-intelligence.com/insights/jaguar-land-rover-cyber-attackhttps://www.blacknote-intelligence.com/insights/jaguar-land-rover-cyber-attackSun, 25 Oct 2026 09:00:00 GMTThe 2025 cyber attack on Jaguar Land Rover halted production for five weeks and cost the UK economy an estimated £1.9bn. Incident response and continuity lessons for every organisation.Salesloft Drift: when an AI chat integration became the way inhttps://www.blacknote-intelligence.com/insights/salesloft-drift-oauth-breachhttps://www.blacknote-intelligence.com/insights/salesloft-drift-oauth-breachSun, 25 Oct 2026 09:00:00 GMTAttackers stole OAuth tokens from the Drift AI chat integration and exported data from hundreds of companies' Salesforce instances. What it means for organisations connecting AI tools to business systems.SharePoint ToolShell: why on-premises servers became a liability overnighthttps://www.blacknote-intelligence.com/insights/sharepoint-toolshell-zero-dayhttps://www.blacknote-intelligence.com/insights/sharepoint-toolshell-zero-daySun, 25 Oct 2026 09:00:00 GMTIn July 2025, state-linked attackers mass-exploited on-premises SharePoint servers, stole cryptographic keys and deployed ransomware. Why patching alone was not enough, and what organisations running their own servers should do.Legal Aid Agency breach: criminal records, bank details and a sector left offlinehttps://www.blacknote-intelligence.com/insights/legal-aid-agency-cyber-attackhttps://www.blacknote-intelligence.com/insights/legal-aid-agency-cyber-attackSun, 25 Oct 2026 09:00:00 GMTAttackers stole Legal Aid Agency applicant data going back decades, including criminal records and financial details. Systems were offline for months. Lessons for UK law firms.M&S and Co-op: how impersonating staff to the help desk cost hundreds of millionshttps://www.blacknote-intelligence.com/insights/marks-and-spencer-co-op-cyber-attackhttps://www.blacknote-intelligence.com/insights/marks-and-spencer-co-op-cyber-attackSun, 25 Oct 2026 09:00:00 GMTThe 2025 attacks on Marks & Spencer and Co-op reportedly began with attackers impersonating employees to IT help desks. The cost ran to hundreds of millions of pounds. Lessons for every organisation.