Aviation Industry Confronts Growing Cybersecurity Threats

Aviation Industry Confronts Growing Cybersecurity Threats

A significant increase in cyberattacks targeting airports and airlines has disrupted operations and compromised passenger data, raising serious concerns about the aviation sector’s capacity to defend against increasingly sophisticated digital threats. On September 19, a ransomware attack affected major European airports, including Heathrow, Brussels, and Berlin, by incapacitating the Muse software developed by Collins Aerospace. This software, widely used at check-in desks and boarding gates, was rendered inoperative, forcing airlines to revert to manual processing of passengers, which led to extensive queues and delays.

The European Union Agency for Cybersecurity confirmed that ransomware was responsible for the attack, a method where criminals demand payment to restore access to critical systems and data. This incident is emblematic of a broader trend. According to Thales, a leading cybersecurity firm, cyberattacks on the aviation sector surged by 600 percent between 2024 and 2025. Over the past five months, several airlines, including Air France, KLM, Qantas, Hawaiian Airlines, WestJet, and South African Airways, have reported breaches, underscoring the sector’s growing vulnerability.

Complexity and Interconnectedness of Aviation Systems

Experts attribute the rise in cyber incidents to the increasing complexity and interconnectivity of aviation’s digital infrastructure. Professor Basie von Solms, Director at the Centre for Cyber Security at the University of Johannesburg, explained that the expansion of computing systems and the integration of multiple platforms have made comprehensive testing and control nearly impossible. “The more it grows, the less control you have. You have to constantly patch it, because there are always vulnerabilities, and cyber criminals make it their task to find out what those are,” he said.

The emergence of artificial intelligence has further complicated the cybersecurity landscape. Von Solms warned that AI is enabling cybercriminals to identify vulnerabilities and probe systems with greater efficiency, making previously difficult hacks easier to execute. “It is just going to get worse,” he cautioned.

Third-Party Risks and Industry Responses

The aviation industry’s reliance on third-party software compounds its cybersecurity challenges. Many systems depend on multiple integrated software platforms, which can introduce vulnerabilities beyond the direct control of airports and airlines. Von Solms noted, “If you use any system, it's probably using four or five other software systems that are integrated into the main one.” These external dependencies create additional entry points for attackers.

In response to recent cyber incidents, airlines have urged passengers to arrive early and stay alert to flight updates. Meanwhile, some competitors are increasing investments in cybersecurity measures. The market for aviation cybersecurity consulting services is also expanding, as companies seek expert guidance to navigate the complex threat environment.

Proactive Measures and Future Outlook

Industry stakeholders emphasize the importance of continuous collaboration and intelligence sharing to mitigate the impact of cyber threats. The Airports Company South Africa (Acsa) highlighted that “stakeholder engagement on cyber risks and intelligence sharing is critical for proactive responses that minimize potential impacts on passengers and airport stakeholders.”

To strengthen its defenses, Acsa has established a dedicated Cybersecurity Operations Centre (CSOC) tasked with continuous threat monitoring and response. The company regularly reviews and updates its cybersecurity controls to align with national and international standards.

The recent spate of high-profile ransomware attacks underscores the urgent need for robust cybersecurity strategies throughout the aviation ecosystem. As digital systems become increasingly integral to operational processes, the industry faces mounting pressure to adapt and invest in stronger defenses to protect passengers and critical infrastructure.