Ransomware attack disrupts European airports.

Summary

By the CyberWire staff

Ransomware attack disrupts European airports.

Several European airports have delayed hundreds of flights following a cyberattack against Collins Aerospace, which provides automatic flight check-in systems, Reuters reports. The incident, which began on Saturday, affected the UK's Heathrow and airports in Berlin, Brussels, and Dublin. The European Union Agency for Cybersecurity said this morning that Collins sustained a ransomware attack.

Collins's parent company RTX (formerly Raytheon Technologies) said the incident affected its MUSE software, stating, "The impact is limited to electronic customer check-in and baggage drop and can be mitigated with manual check-in operations." RTX told Reuters that it's in the final stages of completing updates needed to restore functionality.

Protect data. Secure AI. Innovate now. Join us at DataSecAI 2025.

AI adoption is exploding, and security teams are under pressure to keep up. That’s why the industry is coming together at DataSecAI25, the premier event for cybersecurity, data, and AI leaders, hosted by Cyera.

Built for the industry, by the industry, this two-day event is where real-world insights and bold solutions take center stage. DataSecAI25 is happening November 12–13 in Dallas. No cost to attend - just bring your perspective and join the conversation. Register now to save your seat!

Stellantis discloses breach affecting customer data.

Auto manufacturer Stellantis, which owns Chrysler, Jeep, and Peugeot, has disclosed a data breach affecting customers' names and email addresses, the Register reports. The breach occurred at a third-party provider that supports the company's North American customer service operations. The carmaker hasn't shared how many individuals were affected, but warns customers to be on the lookout for phishing attacks using their personal information.

Renewal of the US Cybersecurity Information Sharing Act is in doubt.

CyberScoop reports that industry sources are pessimistic about the chances of Congress renewing the US's 2015 Cybersecurity Information Sharing Act, which provides legal protections for organizations that share intelligence about cyberattacks. Despite support from industry groups and the Trump administration, disagreements in the Senate seem likely to derail attempts to renew the law before it expires at the end of September.

The Senate Homeland Security and Governmental Affairs Committee, chaired by Senator Rand Paul (Republican of Kentucky), canceled a markup of the legislation last week following criticism of significant changes in the law. Senator Paul then objected to an attempt to reauthorize an unaltered version of the legislation. One industry source told CyberScoop of the extension, "I’d be pleasantly surprised if it is continued given Paul’s objection."

Notes.

Today's issue includes events affecting Belgium, Germany, Ireland, the United Kingdom, and the United States.

Attacks, Threats, and Vulnerabilities

Microsoft Entra ID flaw allowed hijacking any company's tenant (BleepingComputer) A critical combination of legacy components could have allowed complete access to the Microsoft Entra ID tenant of every company in the world.

Verified Steam game steals streamer's cancer treatment donations (BleepingComputer) A gamer seeking financial support for cancer treatment lost $32,000 after downloading from Steam a verified game named BlockBlasters that drained his cryptocurrency wallet.

Technologies, Techniques, and Standards

Future of CVE Program in limbo as CISA, board members debate path forward (The Record) CISA has released two documents explaining its plans for the CVE Program — a critical cybersecurity resource used globally to catalog thousands of software and hardware bugs.

Legislation, Policy, and Regulation

Cyber threat information law hurtles toward expiration, with poor prospects for renewal (CyberScoop) Pessimism is mounting about the chances that Congress will reauthorize a cyber threat information-sharing law before it’s set to expire at the end of this month.

Industry Events

For a complete running list of events, please visit the Event Tracker.

Events

Open Source Security Summit 2025 (Virtual, Sep 25, 2025) The sixth annual Open Source Security Summit brings together business leaders, industry visionaries, and technology users to chart a path forward and highlight the future of open source security solutions at this free virtual event. Register now to explore advancements in open source security and how using open source tools can build trust with customers and consumers.

HackAICon 2025 (Lisbon, Portugal, Sep 25, 2025) The first conference dedicated to combining AI and Ethical Hacking. We're bringing together OffSec pros, hackers, and leading researchers to find practical ways of using AI to secure the internet. Learn about the latest AI Hacking cosmic trends and connect with fellow professionals in engaging conversations. We banned sales pitches from the event - just knowledge sharing, leadership and technical insights.

Don’t miss Jen Easterly, former CISA Director, headlining HIP Conf 25 (Charleston, SC, USA, Oct 7 - 9, 2025) Jen Easterly, former CISA Director, keynotes HIP Conf 2025. A globally recognized cybersecurity leader, Easterly brings unmatched insight into hybrid identity security and resilience. Register now for this must-attend event.

Uniting Women in Cyber 2025 (Crystal City, Virginia, USA, Oct 9, 2025) UWIC is the premier event for cybersecurity leaders, professionals, and aspiring practitioners. Connect with a vibrant community focused on emerging global trends, technological advancements, and workforce development. Attend UWIC 2025 to learn, share ideas, and expand your professional network!

ISC2 Security Congress 2025 (Nashville + Virtual, Tennessee, USA, Oct 29 - 31, 2025) Join thousands of cybersecurity experts at ISC2 Security Congress 2025 and help lead the future of our connected world. Gain the insights you need to stay ahead of the evolving digital landscape. From innovative software to new security strategies, ISC2 Security Congress 2025 is designed to ensure you can navigate tomorrow’s threats.

Sponsor & Support

Grow your brand, generate leads, and fill your funnel.

With the industry’s largest B2B podcast network, popular newsletters, and influential readers and listeners all over the world, companies trust the CyberWire to get the message out. Learn more.

Daily Briefing for 09.22.25

Top stories.

Ransomware attack disrupts European airports.

Stellantis discloses breach affecting customer data.

Renewal of the US Cybersecurity Information Sharing Act is in doubt.

Notes.

Attacks, Threats, and Vulnerabilities

Technologies, Techniques, and Standards

Legislation, Policy, and Regulation

Events