[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fr8trl8seM2IIbQSuyKsC0nTTNLEcpMju5G7fXUbkSgI":3},{"article":4,"iocs":55,"watch_terms":59,"solutions":60,"lesson":150},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"88d6d7d7-c499-49d6-bf91-d8b8a17569eb","Ransomware Attacks on Manufacturers Surge as Supply Chain Risk Grows","ransomware-attacks-on-manufacturers-surge-as-supply-chain-risk-grows-263c51","Research shows attacks on manufacturers rose 40% in early 2026, as ransomware groups increasingly exploit the supply-chain disruption caused by operational shutdowns. The post Ransomware Attacks on Manufacturers Surge as Supply Chain Risk Grows appeared first on SecurityWeek.","Ransomware attacks targeting the manufacturing sector have increased by 40% in early 2026, with threat actors exploiting supply chain vulnerabilities. The Jaguar Land Rover incident, which caused significant production halts and job losses, highlights the severe economic impact, estimated at £1.9 billion in the UK. Mid-sized manufacturers are particularly targeted as they form a critical part of larger enterprises' supply chains.","Ransomware attacks on manufacturers surged 40% in early 2026, exploiting supply chain disruptions.","https:\u002F\u002Fwww.securityweek.com\u002Fransomware-attacks-on-manufacturers-surge-as-supply-chain-risk-grows\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F06\u002FAI-artificial-intelligence-industrial-OT-ICS.webp","2026-09-17T12:29:53+00:00","2026-09-17T14:00:22.378564+00:00",8,[17,20,23,26,28,30],{"name":18,"type":19},"WannaCry","product",{"name":21,"type":22},"Jaguar Land Rover","vendor",{"name":24,"type":25},"The Gentlemen","threat_actor",{"name":27,"type":25},"Qilin",{"name":29,"type":25},"Akira",{"name":31,"type":25},"DragonForce","7d8b5ab8-ea0b-4ced-ae97-ec251b86993a",{"id":32,"icon":34,"name":35,"slug":36},null,"Ransomware","ransomware",[38,43,48,50],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":44},{"id":45,"icon":34,"name":46,"slug":47},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":49},{"id":32,"icon":34,"name":35,"slug":36},{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[56],{"type":57,"value":18,"context":58},"malware","Mentioned as a benchmark for economic damage from cyberattacks",[21,18],{"controls":61,"vendors":149},[62,91,120],{"slug":63,"name":64,"problem":65,"products":66},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[67,75,83],{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":92,"name":93,"problem":94,"products":95},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[96,104,112],{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":117,"url":118,"description":119},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"slug":121,"name":122,"problem":123,"products":124},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",[125,133,141],{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"rubrik","Rubrik","\u002Fvendor-logos\u002Frubrik.png","zero-trust-data-protection","Rubrik Zero Trust Data Protection","https:\u002F\u002Fwww.rubrik.com\u002Fproducts\u002Fdata-protection","Air-gapped, immutable backup for on-premises, cloud and SaaS data, with threat detection in backups and orchestrated recovery.",{"vendor_slug":134,"vendor_name":135,"vendor_logo":136,"product_slug":137,"product_name":138,"url":139,"description":140},"veeam","Veeam","\u002Fvendor-logos\u002Fveeam.png","veeam-data-platform","Veeam Data Platform","https:\u002F\u002Fwww.veeam.com\u002Fproducts\u002Fveeam-data-platform.html","Backup and recovery for virtual, physical, cloud and SaaS workloads, with immutable storage options.",{"vendor_slug":142,"vendor_name":143,"vendor_logo":144,"product_slug":145,"product_name":146,"url":147,"description":148},"cohesity","Cohesity","\u002Fvendor-logos\u002Fcohesity.png","dataprotect","Cohesity DataProtect","https:\u002F\u002Fwww.cohesity.com\u002Fplatform\u002Fdataprotect\u002F","Backup and recovery with immutable snapshots, on premises or as a service.",[],{"slug":151,"title":152,"body":153,"framework_refs":154,"framework_notes":165},"ransomware-surge-exposes-manufacturing-supply-chain-weaknesses","Ransomware Surge Exposes Manufacturing Supply Chain Weaknesses","Ransomware actors are deliberately targeting mid-sized manufacturers because they serve as high-leverage entry points into larger enterprise supply chains, yet often lack mature security programs. The Jaguar Land Rover incident demonstrates how a single compromised supplier can cascade into billions in economic losses, production halts, and workforce impacts. Threat actors exploit this asymmetry — attacking the weakest link to maximise disruption across an entire value chain. This matters because manufacturing organisations frequently prioritise operational uptime over security hygiene, leaving legacy OT\u002FIT environments and third-party integrations dangerously exposed.",[155,156,157,158,159,160,161,162,163,164],"NIST CSF 2.0 — GV.SC (Cybersecurity Supply Chain Risk Management)","NIST SP 800-161r1 — Supply Chain Risk Management Practices","CIS Control 15 — Service Provider Management","CIS Control 11 — Data Recovery","CIS Control 13 — Network Monitoring and Defense","ISO\u002FIEC 27001:2022 — Annex A 5.19 (Information Security in Supplier Relationships)","NIST IR-4 — Incident Handling","NIST CP-9 — System Backup","UK NCSC Cyber Assessment Framework (CAF) — C1 Security Monitoring","GDPR Article 32 — Security of Processing (for any personal data held by manufacturers)",{"NIST CP-9 — System Backup":166,"NIST IR-4 — Incident Handling":167,"CIS Control 11 — Data Recovery":168,"CIS Control 15 — Service Provider Management":169,"CIS Control 13 — Network Monitoring and Defense":170,"NIST SP 800-161r1 — Supply Chain Risk Management Practices":171,"NIST CSF 2.0 — GV.SC (Cybersecurity Supply Chain Risk Management)":172,"UK NCSC Cyber Assessment Framework (CAF) — C1 Security Monitoring":173,"ISO\u002FIEC 27001:2022 — Annex A 5.19 (Information Security in Supplier Relationships)":174,"GDPR Article 32 — Security of Processing (for any personal data held by manufacturers)":175},"Regular, protected system backups are what allow manufacturers to recover production quickly after ransomware.","Incident handling plans that include suppliers help contain ransomware before it cascades through a production supply chain.","Tested, isolated backups let a manufacturer restore systems after ransomware rather than facing weeks of halted production.","Assessing and monitoring suppliers' security posture helps identify mid-sized manufacturers lacking the maturity to resist ransomware.","Network monitoring helps detect ransomware actors moving through a supplier's environment before encryption or spread to partners.","Supply chain risk practices help manufacturers understand which suppliers could halt production if hit by ransomware, and plan accordingly.","Governing supply chain risk means large manufacturers assess and require minimum security from mid-sized suppliers, the weak link exploited in incidents like Jaguar Land Rover's.","Security monitoring under the CAF helps detect ransomware activity early in organisations critical to supply chains.","Supplier security requirements in contracts give larger firms leverage to raise the security of mid-sized manufacturing suppliers.","Manufacturers holding employee or customer personal data must apply security measures that protect it against ransomware theft and encryption."]