The Canadian Broadcasting Corporation (CBC) announced results of an investigation into a breach at a UN agency based in Montreal and an apparent effort to cover it up.
"The documents show that the breach was discovered by an outside agency, and what should have been a race to contain it was mired in delays, obstruction, and negligence. The documents suggest that four members of ICAO's information and communications technology (ICT) department tried to hide evidence of their own incompetence, and their absentee supervisor allowed that to happen."
This happened at the International Civil Aviation Organization (ICAO), and it was the most serious cyberattack in agency history.
It's believed this was a Chinese-based hack against an organization that is essentially a gateway to aviation industry experts, associations, and companies around the world.
It was apparently a watering hole attack. And within 30 minutes of the ICAO breach, hackers were able to parlay that into an attack against agency partners in Turkey, the CBC found.
There is much more in the CBC's chilling investigation of the hack that may have been made worse as employees "tried to hide evidence of their own incompetence...."
It will not surprise us if this topic comes up at SecureWorld Toronto on April 24th.
And we know this much for certain: the Chinese love stealing intellectual property from the West, including from aviation companies. It's just one of the reasons GE Aviation Global CISO Deneen DeFiore told us, "Cyber is a part of everything we do." Watch a snippet here: