The OT-ISAC (Operational Technology Information Sharing and Analysis Center) published two reports Wednesday warning that cybersecurity risks facing Asia-Pacific aviation extend beyond corporate IT networks to shared technology providers, passenger reservation platforms and airport OT (operational technology).
They do not establish a general attack-frequency trend or a verified compromise of airport control networks.
Management, diagnostic, or test environments that are exposed to networks that do not require access should also be investigated, as should unexpected vendor sessions or cross-zone traffic into airport operational networks.
OT-ISAC recommends that airlines and airport operators review supplier access privileges, monitor unusual service-account logins and bulk data queries, preserve authentication and API logs, and rotate affected credentials and tokens.
It also calls for mapping third-party access paths into airport networks, enforcing multifactor authentication, segmenting operational networks, monitoring engineering connections, and validating manual fallback procedures for critical airport services.