Collins Aerospace Hit by Dual Cyberattacks, Disrupting European Airports and Data Security

In September 2025, Collins Aerospace, a leading global aerospace and defense company, became the target of two significant cyberattacks, highlighting the growing vulnerability of critical infrastructure to sophisticated digital threats. The attacks, which combined a ransomware shutdown and the exploitation of legacy credentials, have raised alarm across the aviation sector and cybersecurity communities, exposing how past breaches can have lingering consequences if not fully mitigated.

The first attack involved a threat group known as Everest, which leveraged credentials stolen during a 2022 breach to infiltrate Collins Aerospace systems. By exploiting these legacy credentials, the attackers were able to access sensitive data that should have been protected by updated security protocols. This incident underscores a persistent cybersecurity challenge: old vulnerabil