Emerging threats in aviation: a study of recent cyber and hybrid attacks on global airports
摘要
The increasing susceptibility of the world-wide aviation infrastructure to cyber and physical attacks is demonstrated by the recent attacks and operational disturbances in major international airports. In 2024–2025, airports in Europe, the United States, India, and the Middle East witnessed major incidents, such as massive ransomware attacks on check-in, baggage, and operational systems as well as hostile drone incursions and missile attacks on the safety and continuity of airports. In 2025, the ransomware attack on the European airports that disrupted the popular passenger-processing system of MUSE demonstrated the high dependence of the sector on the third-party digital services and identified the critical vulnerability in the supply-chain cybersecurity. In a similar manner, the Seattle-Tacoma Airport ransomware incident showed that attackers have the ability to target critical systems like Wi-Fi, airline portals, and baggage handling and disrupt the entire system, creating mass delays and financial effect. The incidences of drone intrusions in Copenhagen and Oslo emphasized the dangers of hybrid physical-digital risks, and the missile attacks around Ben Gurion Airport served to remind people of the geopolitical fragility of aviation centers. This study analyses these incidents to establish the underlying system vulnerabilities, evaluate new threats, and recommend initiatives to improve cyber-resilience, business continuity, and coordinated threat management within the international aviation system.