Airbus expands cyber defence: the acquisition of Ultra Cyber shows how the security landscape of aviation is changing
Airbus announced that on 23 March 2026 it entered into a definitive agreement with the Cobham Ultra group to acquire the British company Ultra Cyber Ltd, thereby further strengthening its cyber security segment at a time when digital resilience is becoming one of the key issues for defence, civil aviation and critical infrastructure. This is a move that goes beyond a classic corporate acquisition: in the background lies a broader security shift in an industry in which the protection of communications, data, networks and connected platforms is no longer a supporting function, but an integral part of national security, military readiness and flight safety.
According to Airbus’s official statement, Ultra Cyber Ltd employs more than 200 people, and the bulk of its activities is concentrated in Maidenhead in the United Kingdom, at a centre that the company describes as a centre of excellence for cyber capabilities. Airbus points out that this acquisition will strengthen its end-to-end cyber offering and complement the existing British capabilities it is already developing in Newport in Wales. The company openly speaks of creating a strong British sovereign player in the field of cyber defence, but also of a broader European ambition: building what it calls a European digital shield, relying on trusted technologies available to allied states and partners from NATO and the Five Eyes circle.
Such wording is not accidental. In recent years, the aviation industry has increasingly openly acknowledged that digital threats are no longer limited to data theft or short-term disruptions in the operation of information systems. Because of the strong interconnection of aircraft, ground operations, logistics, maintenance, communication links and supply chains, any more serious cyber incident can spill over into operational availability, company reputation, the confidentiality of defence programmes and the resilience of the wider transport network. That is why Airbus also emphasises in this deal that it is not merely about expanding the portfolio, but about a long-term investment in infrastructure that must remain reliable in a period of heightened geopolitical tensions.
What exactly Airbus gains with this acquisition
In its official announcement, Airbus states that the acquisition also includes specialised capabilities for airborne data links, that is, an area that complements its military aircraft portfolio. This is an important detail because it shows that the deal is not aimed only at defending office networks and traditional IT systems, but also at the secure exchange of sensitive data between ground and air platforms. In an era in which communication links, real-time data transmission, digital command and interoperability among allied systems are crucial to the success of military operations, such capabilities have direct strategic value.
Airbus further points out that Ultra Cyber will be integrated into activities within the Connected Intelligence business unit as part of Airbus Defence and Space. In this way, cyber security is not viewed as a separate technical add-on, but as part of a broader ecosystem of defence, intelligence and communication solutions. In practice, this means that network protection, threat monitoring, data security, incident response and the defence of communication channels are increasingly merging with classic aerospace-defence products. The boundary between digital protection and physical defence is thus becoming ever thinner.
Additional weight is given to the deal by the fact that Airbus had already completed the acquisition of the German company infodas in 2024, which specialises in cyber security and IT solutions for the public sector, defence and critical infrastructure. Airbus is now openly saying that, after strengthening its presence in Germany and the European Union, it also wants to reinforce the British pillar of its cyber business. The company states that it is currently developing pan-European cyber activities with teams in the United Kingdom, France, Germany, Spain and Finland. In other words, this acquisition fits into a series of moves already under way through which Airbus is trying to build a European network of sovereign and mutually connected cyber capacities.
Why cyber security in aviation has become a top-tier issue
The European Union Aviation Safety Agency, EASA, has been warning for years that civil aviation is an attractive target for cyber attacks. The reason is simple: this is a sector that depends on a large number of digitally connected systems, from the design and production of aircraft to flight planning, air traffic control, maintenance, satellite services, communication networks and airport operations. When military programmes, sensitive platform data and international supply chains are added to these systems, it becomes clear why leading manufacturers and operators are investing more and more money specifically in cyber resilience.
ICAO, the umbrella organisation of civil aviation within the United Nations, states in its cyber security strategy that the global sector must be resilient to cyber attacks, secure and capable of continuing innovation and growth. This wording is particularly important because it connects the security and development dimensions. Aviation is digitalising rapidly: reliance on data, automation, remote links, system monitoring, networked operations and the exchange of information among numerous actors is increasing. Every new layer of digitalisation brings efficiency, but also a new attack surface.
The International Air Transport Association, IATA, also warns that aviation is an attractive target for threats that may have a financial motive, the goal of data theft or the intention of causing disruption and damage. Translated for the end passenger and the wider public, this means that cyber security today is not merely a matter of protecting passwords and servers, but also of maintaining regular traffic, service availability, the protection of passenger data, the integrity of operational processes and trust in a system that must function almost without interruption.
From regulatory pressure to the market race for resilience
The European regulatory framework has tightened considerably in recent years. EASA rules known as Part-IS introduce the obligation of more systematic information security management in civil aviation, with a focus on risks that may affect the safety of operations. In practice, this means that airlines, maintenance organisations, air navigation service providers, training centres and other covered entities can no longer treat cyber security as an isolated IT task. They are required to have structured information security management systems, risk assessments, incident reporting procedures and recovery measures.
That regulatory tightening also creates market pressure. Large companies want to have their own, trusted and politically acceptable suppliers of cyber solutions, especially in defence and security-sensitive programmes. That is why the word “sovereign” echoes so often in Airbus’s announcement. In the European and British context, it does not mean only domestic ownership or local jobs, but also confidence that key technologies, sensitive communications and security expertise remain within a politically reliable framework. For states that are increasingly thinking about autonomy in defence and digital matters, such an argument is becoming almost as important as price or technical specifications.
This is precisely why the acquisition of Ultra Cyber comes at a time when the cyber market in defence and transport is expanding not only organically, but also through consolidation. Large industrial systems want to bring under one roof the protection of IT, the defence of operational technologies, encryption, intelligence analytics, secure communications and specialised military data links. With this move, Airbus shows that it does not want to depend exclusively on external partners, but to build deeper internal control over capabilities that are becoming crucial for future contracts and international position.
The British aspect: defence industry, jobs and the political message
The announcement is politically carefully worded toward the United Kingdom as well. Airbus emphasises that Britain is one of its key home markets and that with this investment it confirms its long-term presence in the country. Along with more than 200 employees at Ultra Cyber and the existing cyber activities in Newport, the company is sending the message that London and the broader British defence-industrial system still have an important place in the European security architecture, despite all the changes in relations between the United Kingdom and the European Union after Brexit.
The statements made by the leaders of the parties involved further reinforce that framework. Airbus says that it wants to be a long-term and reliable partner to the British Ministry of Defence and that together with Ultra Cyber it is building the resilient and sovereign infrastructure needed for the United Kingdom and its allies to stay one step ahead in the cyber domain. Advent, the owner of Cobham Ultra, stresses that its previous investments in Ultra Cyber contributed to protecting the country and its allies from electronic warfare. Ultra Cyber itself says that the agreement opens a new chapter for British sovereign cyber capabilities and that integration with Airbus should accelerate innovation, research and development, and the international delivery of advanced solutions.
Such statements should also be read in the light of the increasingly intense debate on the resilience of the European and transatlantic defence industry. In a world in which armed conflicts, intelligence operations, electronic warfare and cyber campaigns are increasingly overlapping, the industry that produces military aircraft, satellite systems, communication equipment and security solutions is becoming a natural target for rival states, criminal groups and actors operating on the boundary between those two worlds.
This is not only about military programmes, but also about the resilience of the entire system
Although Airbus’s statement strongly emphasises the defence and sovereign dimension, the topic is also important for civil aviation. The history of recent years has shown that disruptions in digital systems can quickly affect large parts of traffic, even when there is no direct threat to flight safety. Airlines, airports and technology service providers rely on complex and interdependent systems for reservations, passenger processing, crew planning, maintenance, communication and operations monitoring. When one link fails, the consequences often spill far beyond the place where the problem originated.
That is why the industry is increasingly speaking of cyber resilience, and not only of cyber protection. The idea is not merely to prevent an attack, but to ensure that the system continues to operate, that the incident is quickly detected, isolated and remedied, and that core operations remain preserved. In its materials, EUROCONTROL insists precisely on that point: complete “cyber security” may be an unattainable ambition, but resilience that enables continuity of operations and recovery must become a common standard. In such a framework, acquisitions like this are no longer only a matter of balance sheets and business strategy, but part of a broader transformation of the industry.
Here also lies the reason why large aviation and defence companies do not want to leave the cyber segment to secondary suppliers. As the number of connected systems increases and the boundary between information and operational technology is erased, every large industrial group seeks to have stronger direct oversight of the security architectures that support its products and services. This applies to aircraft manufacturers, defence contractors and companies that manage sensitive transport or communication infrastructure alike.
What follows after the announcement of the agreement
The transaction has not yet been completed. Airbus states that the completion of the deal is subject to customary regulatory approvals and that closing is expected in the second half of 2026. This means that standard merger review procedures and possible security checks will follow, especially because this is a sensitive area connected to defence, state capabilities and technological sovereignty. Only after those steps will it be possible to speak of the full integration of employees, technologies and contractual activities into the Airbus system.
But even before formal completion, the deal already carries symbolic weight. It shows that leading European aerospace-defence companies no longer view cyber as a side service, but as a fundamental capability that must be built into the very core of business. At the same time, it also shows that competition among large groups will increasingly be fought in the area of digital defence, secure communications, data links, the protection of critical infrastructure and the ability to respond quickly to incidents.
For the wider public, this news may at first glance seem technical and a narrow professional development, but its meaning is much broader. As aviation, the defence industry and public infrastructure become ever more interconnected, security no longer depends only on mechanical reliability, crew training or the physical protection of facilities. It increasingly also depends on who controls the digital systems, how resilient they are, and whether states and companies can trust the technologies they rely on in moments of crisis. In that context, Airbus’s acquisition of Ultra Cyber is not merely business news, but a clear signal that digital defence has become one of the main battlefields of contemporary aviation and security policy.
Sources:- Airbus – official announcement of the signing of the agreement to acquire Ultra Cyber Ltd, the number of employees, locations and the expected timeframe for closing the transaction (link)- Airbus – overview of the company’s cyber activities and security services, including the military and industrial segment (link)- Companies House – official register of Ultra Cyber Limited with data on status, address and date of incorporation (link)- EASA – overview of cyber security in European aviation and the assessment that civil aviation is an attractive target for cyber attacks (link)- ICAO – cyber security strategy for global civil aviation and a framework of priority actions (link)- IATA – overview of the industry’s position on cyber security in aviation and the growing operational risks of digitalisation (link)- EASA – information on Part-IS rules and information security management obligations in aviation (link)- EUROCONTROL – overview of activities aimed at cyber resilience and defence capabilities of the European aviation system (link)
Find accommodation nearby
Creation time: 3 hours ago