Concise Cybersecurity Intelligence for Decision-Makers
On 19–21 September 2025, several major European airports—including London Heathrow Airport, Brussels Airport, Berlin Brandenburg Airport, Dublin Airport and Cork Airport—were hit by widespread disruption after the widely-used Collins Aerospace “MUSE” system was compromised. The root cause, confirmed by the European Union Agency for Cybersecurity (ENISA), was a ransomware incident against a third-party vendor—illustrating how one software failure can cascade into continent-wide operational chaos.
This disruption exposed key vulnerabilities in the aviation sector’s digital ecosystem. For aviation and other critical infrastructure sectors, the message is clear: robust third-party risk management, resilient fallback strategies and practised incident response plans aren’t optional—they’re imperative.
Download our Cyber Insights document summarising this attack and the key takeaways and learnings from it.
At Cyber Management Alliance, we support organisations in aviation and beyond to develop, rehearse and align these with regulatory frameworks such as NIS2, Digital Operational Resilience Act (DORA) and best-practice standards. Reach out to us today to know more.
Don't forget to read our blog on the cyber attack on European Airports.
Disclaimer: This document has been created with the sole purpose of encouraging discourse on the subject of cybersecurity and good security practices. Our intention is not to defame any company, person or legal entity. Every piece of information mentioned herein is based on reports and data freely available online. Cyber Management Alliance neither takes credit nor any responsibility for the accuracy of any source or information shared herein.
We offer a host of courses including our NCSC Assured Training in Cyber Incident Planning and Response and our NCSC Assured Training in Building and Optimising Incident Response Playbooks.
Hands On, full-support 'Security As a Service', specifically designed for organisations that require access to experienced cybersecurity, governance, risk and compliance professionals.
A unique, affordable, subscription-based, cybersecurity service for small to medium businesses, offering 280+ services in cybersecurity.
Scenario-based, verbally-simulated tabletop attack exercises that test your organisation's ability to effectively respond to a cyber-attack.