Apple and Tata Group Respond to Cyberattack on Supply Chain Partner California-based Apple is deepening its collaboration with India’s Tata Group after a cyberattack on a Tata subsidiary exposed sensitive internal files. The breach, which targeted a company within Apple’s supply chain, prompted immediate investigations by cybersecurity teams to assess the scope of compromised data. Apple is working closely with Tata Group and authorities to contain the incident, though no disruptions to manufacturing or shipping operations have been reported. The attack underscores growing cybersecurity risks in global supply chains, particularly as Apple expands its production footprint in India. The partnership between Apple and Tata covering device assembly, manufacturing, and after-sales services is a cornerstone of Apple’s strategy to diversify its supply chain beyond traditional hubs. The incident highlights the need for heightened security measures as the company scales operations in new markets.

Critical SharePoint RCE Vulnerability (CVE-2026-20963) Under Active Exploitation The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that CVE-2026-20963, a remote code execution (RCE) vulnerability in Microsoft SharePoint, is being actively exploited in the wild. The flaw was patched by Microsoft in January 2026 but has since been added to CISA’s Known Exploited Vulnerabilities (KEV) catalog as of Wednesday. ### Vulnerability Details - Affected Products: Microsoft SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Enterprise Server 2016. - Root Cause: Improper deserialization of untrusted data, allowing unauthenticated attackers to execute arbitrary code remotely. - Attack Complexity: Low no user interaction is required for exploitation. - Impact: Successful exploitation could enable attackers to inject and run malicious code on vulnerable SharePoint servers, potentially granting access to sensitive corporate data or serving as an entry point into broader network environments. Microsoft initially assessed the vulnerability as "less likely" to be exploited but still urged organizations to apply the patch immediately. Despite the warning, active exploitation has now been observed. ### CISA’s Response & Deadline CISA’s inclusion of CVE-2026-20963 in the KEV catalog mandates that U.S. federal civilian agencies remediate the flaw by March 21, 2026. While Microsoft has not yet updated its advisory to confirm active attacks, CISA’s action underscores the urgency for all SharePoint users including private and public sector organizations to apply the fix if they haven’t already. SharePoint vulnerabilities remain a high-value target for threat actors due to the platform’s role in storing critical business data and facilitating internal network access.

Marks & Spencer (M&S), a prominent UK retailer, fell victim to a coordinated ransomware attack linked to the DragonForce cartel and its affiliate Scattered Spider. The incident involved the deployment of DragonForce-built ransomware, leveraging Conti’s leaked source code with advanced encryption (ChaCha20 + RSA) and network-spreading capabilities via SMB. The attack targeted both local and shared network storage, with operators threatening to delete decryptors and leak stolen data if ransom demands were unmet by deadlines (September 2 and 22).The breach disrupted M&S’s operations, risking customer data exposure, financial fraud, and reputational damage due to media coverage. DragonForce’s cartel model—recruiting affiliates like Devman and Scattered Spider—amplified the attack’s sophistication, combining initial access tactics with aggressive data exfiltration. While the full scope of compromised data (e.g., payment details, personal records) remains undisclosed, the incident aligns with DragonForce’s pattern of high-impact extortion, including threats to publish sensitive information. The attack underscores the escalating risks posed by ransomware-as-a-service (RaaS) ecosystems, where collaborative cybercriminal groups exploit enterprise vulnerabilities for maximal disruption and profit.