As digital connectivity increases within aviation, cybersecurity threats have evolved dramatically, posing serious risks to aircraft…

Introduction: The Sky Is Not the Limit for Cybercriminals

By ObserIQ — Digital Risk & Fraud Intelligence | June 2025

FBI warns Scattered Spider is now targeting the aviation sector. The group uses sophisticated social engineering to bypass MFA, steal data, and deploy ransomware via helpdesk deception.

The FBI has issued a high-priority alert warning that a notorious hacker group known as Scattered Spider is actively targeting the airline industry. Previously known for high-profile cyberattacks on…

SEQRITE Labs uncovers CargoTalon, a large-scale cyber-espionage campaign targeting Russian aviation with highly targeted phishing, DLL implants (EAGLET), and disguised logistics documents.

VxWorks SATCOM OSINT via Censys, FOFA, Modat: exposed aircraft communication targets.

A new Charon ransomware campaign is targeting the Middle East's public sector and aviation with APT-level tactics, including DLL sideloading and anti-EDR.

In an era where cyber threats increasingly target critical infrastructure, no industry is immune, not even aviation. On May 3, 2025, South…

Comment nos avions sont devenus des “centres de données volants” et pourquoi leur sécurité numérique détermine désormais notre sécurité…

As the aviation sector advances toward complete digitalization, the benefits of streamlined operations, enhanced connectivity, and…

A targeted ransomware attack on a U.S. aviation provider caused widespread flight delays and cancellations at major European airports.

Over 230 flights canceled across Europe as a cyber disruption grounds check-in systems, leaving passengers stranded and airports in chaos.

A Chinese APT used fake Cloudflare verification pages and malicious LNK files to inject PlugX via DLL sideloading into a Serbian aviation agency, aiming for long-term espionage.

Recent drone incursions in Copenhagen and Oslo, combined with ransomware attacks on major airports including Heathrow, reveal critical…

The Everest ransomware group claimed the attack on Collins Aerospace, alleging theft of 50GB of data, following the airport check-in system failures in September.

“To tune is human. To transmit without a license is, well… going to attract men in suits.”

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

CISA warned of three Critical flaws (CVSS 10.0) in Radiometrics VizAir weather systems. Unauthenticated attackers can manipulate wind shear alerts and runway configurations, risking hazardous flight conditions.

In China, new regulations for portable charging devices are under discussion — and they are already causing unease