EASA Part-IS is Here. Cybersecurity Compliance is not optional. Are You Ready? As the aviation industry integrates EASA Part-IS (Information Security) regulations, the responsibility falls on Part 145, Part CAMO, and Operations to ensure their digital perimeters are as secure as their physical aircraft. To support the industry in meeting these critical deadlines, Sofema Online…

Specific Exposures and Threat Scenarios Malware/Ransomware Initial Access (Exploitation via device) General Ransomware Campaigns: Ransomware actors often gain initial access through phishing campaigns targeting aviation employees or by exploiting exposed VPN/RDP servers. Mobile devices are the primary target for phishing/social engineering attempts. Ransomware group LockBit demanded $200 million from Boeing in 2023. Attacks on airport…