The Jaguar Land Rover cyber attack reportedly began with a vishing campaign targeting employees. This assessment examines the human warning signs that may have appeared first, why suspicious activity must be reported centrally and how intelligence led analysis could support an earlier response.
