Almog succeeds Avi Tenenbaum who had been in the role since October 2021. An experienced helicopter pilot, Almog brings a proven track record of driving growth and innovation, according to Cyviation. 

“I am honoured to join Cyviation at such a pivotal time,” said Almog. “I look forward to working with our talented team to continue delivering exceptional value to our customers and partners.”

Arik Arad, chairman of Cyviation said: “We are thrilled to welcome Eliran Almog as our new CEO. His vast experience and strategic vision will be invaluable as we continue to innovate and expand our cybersecurity solutions for the aviation industry.”

Cyviation also extended its gratitude to outgoing CEO Tenenbaum for his “exceptional leadership and dedication”, which have been “instrumental” in establishing Cyviation as a “trusted name” in aviation cybersecurity.

The post Cyviation appoints new CEO appeared first on Corporate Jet Investor.

Lack of awareness is preventing business aviation companies from deploying effective cyberprotection methods, according to Aviel Tenenbaum, CEO, Cyviation. “I do not think that US or the aviation industry in general is sufficiently aware of the threat,” Tenenbaum told CJI. “I meet decision-makers from different parts of the industry, operators, manufacturers, service providers and others. Most acknowledge that something must be done to further address cybersecurity on aircraft.”

Such concerns prompt investment in protective measures but seldom is that directed towards aircraft. “They invest on cybersecurity for the data, IT and general facilities, but only few have so far taken the step forward to actually develop such needed resilience for the fleet and aircraft,” said Tenenbaum. “This is where we can help operators embark on a cybersecurity journey with the focus on aircraft and fleet.”

Cyviation believes its US HQ, combined with a $4m capital raise last autumn, will help more firms begin that journey. (The funding, revealed in October 2023, is part of a larger round, which is expected to enter Series A by the first half of this year). “The opening of our US presence is to be closer to the potential target operators – both from commercial airlines as well as business jets,” Tenenbaum told us. 

Leading the new US office is Arik Arad, chairman, Cyviation. Arad is also a partner at Stonecourt Capital and was previously an operating partner at Pegasus Capital Advisors. “In a time marked by unprecedented international risks and escalating cyber threats, our dedication lies in furnishing the aviation industry with unmatched cybersecurity safeguards, ultimately heightening safety standards,” said Arad.

Cyviation provides aircraft cyberevent management and intrusion detection for both private jets and commercial aircraft. It aims to provide multiple layers of resilience ranging from fleet assessment and aircrew training to aviation security SIEM. This system combines both security information management (SIM) and security event management (SEM) into one security management system. 

Tenenbaum told us a three-point plan would help aviation businesses strengthen their cybersecurity protection. These include: appointing a cybersecurity owner for fleet and aircraft and assessing assets for cyber vulnerability and starting the deployment of mitigation recommendations. Companies should also build stronger awareness and set a process to follow when a cyberattack is suspected, he told CJI.

Last autumn, the company revealed it had reached the commercial stage of its SkyRay cyber protection solution and is partnering with a range of companies. These include: OEMs, commercial airlines and regulatory agencies. One of the companies helping the adoption of the SkyRay solution is Polaris Aviation Solutions, the aircraft management, charter and project management company.

Meanwhile, improving cybersecurity for business aviation companies features in our CJI London 2024 conference, which opens in the capital on February 5th. Read the agenda here.

Cyviation’s three steps to boost cybersecurity

1. Appoint cybersecurity owner for fleet and aircraft
2. Assess assets for cyber vulnerability and deploy mitigation recommendations
3. Build stronger awareness and set a process to follow when a cyber-attack is suspected.

The post Cyviation to target cybercrime in 2024 from its NYC office appeared first on Corporate Jet Investor.

This is bringing to the skies connectivity standards previously only enjoyed in the home or office. However, it also offers its own unique set of challenges. Business aviation finds itself at the forefront of a pressing cybersecurity battle that demands immediate attention, according to aviation cybersecurity specialist Cyviation.

“Cybersecurity in aviation is no longer an option but a necessity,” Aviel Tenenbaum, CEO, Cyviation, told Corporate Jet Investor. He divides business aviation cybersecurity risks into two areas: financial and reputational and threats to life.

In our highly interconnected world, hackers can impact an aircraft in various non-lethal but highly damaging ways. This could range from the relatively trivial, such as compromising in-flight entertainment systems, to the much more serious – spreading viral messages to passengers’ devices, tarnishing the operator’s reputation. The financial impacts could include severe impacts on stock prices to altering passengers’ booking decisions.

Even more worrying is the threat to life. Terrorist threats pose a grave concern, according to Tenenbaum. Terrorists may try to gain control of an aircraft, potentially leading to catastrophic consequences. This risk could reshape the business aviation landscape, similar to how the 9/11 attacks transformed global aviation security perceptions, he said. With the world locked seemingly in intensified conflict, it’s a threat Tenenbaum believed can only intensify in the years ahead. These risks often stem from political disputes or conflicts between countries or entities with commercial or terror-related interests. It could be motivated by an attempt to exploit what criminals see as a money-making opportunity.

On a more operational level, business jets could be subject to flight seizure, where a cyberattack could force an entire fleet to abort take off due to perceived threats. In another scenario, GPS spoofing, or sending counterfeit signals during navigation or landing, could cause go-arounds, increased fuel costs, delays, and missed connections. The cumulative impact of these disruptions could cost business aviation hundreds of thousands of dollars, in addition to the safety risks, underscoring the need for robust cybersecurity measures.

One practical example of cyberattacks came this summer with the data breach suffered by American Airlines and Southwest Airlines. Hacking a third party’s software company reportedly compromised personal details such as names and social security numbers for pilot and cadet applicants. The latest attack, the second in the past year, was said to result in the disclosure of more than 8,000 applicants’ personal details.

Mitigating these risks by enhancing on board cybersecurity measures is Cyviation’s mission. Tenenbaum highlighted the importance of analysing every aspect of an aircraft’s systems, including conducting vulnerability assessment to identify and mitigate possible cyber risks. But there is a catch, he explained. Most aircraft systems were designed decades ago, long before the concept of cyber threats emerged. It is only recently that business aviation has begun to comprehensively address these cybersecurity concerns. So, assessing and enhancing cybersecurity in business aviation faces a significant challenge.

Cyviation’s solution to the complex challenges posed by these threats is mapping vulnerability, mitigation where possible, increasing cyber awareness, providing tools and knowledge to manage aircraft related cyberattack and deploy solutions to identify as much as possible cyber events in real-time. It is vital to develop preparedness against vulnerable and aging systems that were not designed to withstand modern cyberthreats, said Tenenbaum.

Computer systems, particularly those associated with maintenance programs and supply chains, can be vulnerable to cyberattacks and merit close scrutiny. Such systems often have multiple users, including subcontractors and airport staff, making them susceptible to cyberattacks. Once compromised, these systems can manipulate various aspects of an aircraft’s operations, posing a threat to flight safety, said Tenenbaum.

Gauging the full extent of the problem is complicated by the understandable reluctance of many business aviation firms to disclose that they have been targeted – or the nature of the attack. But what is clear is the urgent need to protect businesses and individuals, said Tenenbaum. Enhancing cybersecurity in business aviation requires acknowledging the problem and raising industry-wide awareness, he added.

Assessing the business fleet to identify vulnerabilities and risk factors is the initial step. Mitigating these risks involves protecting maintenance computers and establishing processes to safeguard them. Collaboration among business aviation stakeholders, including OEMs, regulators, operators, and cybersecurity experts, is essential. “Collaborative efforts are the key to a more secure business aviation landscape,” said Tenenbaum.

In future, Tenenbaum predicts a broader adoption of cybersecurity measures across the business aviation industry. As aviation regulations become more specific compliance needs will mean cybersecurity measures will become a must within the next 24-36 months. More cybersecurity companies will collaborate with maintenance, repair, and overhaul (MRO) providers to enhance resilience, safety, and security, he said. Privacy and security will become paramount concerns, particularly in business aviation.

The aviation industry, particularly, business aviation, stands at a critical point where cybersecurity is no longer a choice but an absolute necessity, said Tenenbaum . The battle to safeguard our skies requires a collective effort from all stakeholders. Only through awareness, collaboration, and proactive measures can we ensure the safety and security of business aviation in the digital age. Nothing less than the future of business aviation security hinges on our ability to adapt and innovate in response to evolving cyberthreats.

The post Cybersecurity challenges – ‘The Growing Threats’ appeared first on Corporate Jet Investor.

*Airbus is boosting its cybersecurity protection to reflect the rapid rise in cyber threats and the growing digitisation and connectivity of its products and systems.

*The OEM is investing in measures to strengthen its cybersecurity capabilities and expertise, to ensure “the best possible protection for the company, its ecosystem, and its customers”.

*Airbus will combine its existing company-wide cybersecurity services into a single organisation, which will go live on July 1st 2022. The new organisation will bring together more than 1,000 experts based in France, Germany, the UK and Spain.

Airbus is taking steps to strengthen and grow its cybersecurity activities throughout the Group. The company will showcase its cybersecurity solutions at the International Cybersecurity Forum (FIC) from 7^th to 9^th June 2022 in Lille (France).

With the exponential cyber threats, along with the increasing digitalisation and connectivity of its products and systems, cybersecurity has become a strategic and pivotal component of Airbus development and future. The company has therefore undertaken a series of actions and investments to further develop and strengthen its cybersecurity capabilities and expertise, ensuring the best possible protection for the company, its ecosystem, and its customers.

Thus, Airbus has decided to combine its existing Company-wide cybersecurity services activities in a single organisation which will go live on 1^st July 2022. The new organisation, which will focus on cybersecurity and safety services, especially in the industrial sector will bring together more than 1,000 experts based in France, Germany, the UK and Spain. It will provide a unique global service offering to protect the Group and meet the needs of national authorities and commercial customers including critical infrastructures.

Besides this services activity, cybersecurity teams dedicated to large projects will develop further their expertise and business for defence and space customers and programmes. 400 experts will contribute to major integration projects in France, Germany, UK and Spain around high-level technologies such as cyber defence and cryptography.

Furthermore, Airbus has recently acquired DSI, a Germany-based company certified by the Federal Office for Information Security (BSI) that provides cryptography and communication systems for the space, airborne, naval and land sectors.

For its cybersecurity products, Airbus has just launched a double-digit million euros investment plan – mostly focused on R&D activities – in its Stormshield subsidiary. The company, which gathers 400 experts and offers data, endpoint and network security solutions will increase the capabilities and performance of its product lines and accelerate the development of its international activities.

Within a fast-paced sector where the turnover of employees is high, Airbus continues to invest in talents, having recruited several hundred cybersecurity experts in recent years and foreseeing an increasing need of cyber skills at all levels. Among many initiatives in this domain, Airbus has just launched its own diploma in cybersecurity. The first 25 students will start their degree-level training programme in cybersecurity in September 2022. To discover Airbus’ capabilities, meet us at the FIC – Stand F22.

The post Airbus boosts cybersecurity protection with new organisation appeared first on Corporate Jet Investor.