Airbus expands cyber defense as aviation enters an era of heightened digital risks
Airbus has further strengthened its cybersecurity strategy by announcing that it intends to acquire the French company Quarkslab, a firm specializing in offensive and defensive cybersecurity, vulnerability analysis, research, and the protection of critical systems. The move comes at a time when the aviation industry is rapidly digitalizing, and aircraft, maintenance, ground operations, and communication with external systems are increasingly dependent on connected networks, data exchange, and software platforms. In such an environment, cybersecurity is no longer a supporting IT topic, but a matter of operational resilience, flight safety, regulatory compliance, and strategic control over key technologies.
On April 21, 2026, Airbus announced that it had reached an agreement to acquire Quarkslab, with the closing of the transaction expected during 2026. According to available information, Quarkslab was founded in 2011 and employs approximately one hundred experts. The company develops solutions and provides services focused on protecting critical assets, data, and users from cyberattacks, and it is also known for deep technical work in the field of vulnerability research, embedded systems security, and advanced testing of defensive capabilities.
Why Quarkslab matters to Airbus
The value of this acquisition does not arise only from expanding the portfolio, but also from the profile of the company Airbus is buying. Quarkslab has positioned itself on the market as a house that combines research work, engineering depth, and the operational application of security solutions. In practice, this means it is not just a consulting cyber business, but expertise that can be applied to very sensitive and complex systems, including those in defense, critical infrastructure, industry, and advanced digital platforms.
For Airbus, this is especially important because it is a manufacturer and technology group whose products are no longer defined only by hardware. Today’s aircraft and accompanying systems rely on digital architectures, real-time performance monitoring, predictive maintenance, software upgrades, data exchange between aircraft and ground, and ever broader integration with external tools. As such connectivity increases, the number of possible attack points also grows. Airbus had previously publicly warned that the growth of digitalization and connectivity in its products and systems makes cybersecurity a key part of its own development.
That is precisely why Quarkslab is not merely an addition to Airbus’s existing offering, but part of a broader attempt to build a European and nationally rooted, so-called sovereign cyber infrastructure. In French and European security vocabulary, the term “sovereign cybersecurity” implies the ability to keep sensitive technologies, expertise, defensive tools, and critical services under domestic or European control, without excessive dependence on external suppliers in sectors that carry security and strategic weight.
Continuity, not an isolated move
The announcement of the Quarkslab acquisition fits into a clear series of Airbus steps. In September 2024, the company completed the acquisition of the German company infodas, a firm that provides cyber and IT solutions for the public sector, defense, and critical infrastructure. With that, Airbus strengthened its position in Germany and within the European market for system security solutions and data transfer between different security domains. In March 2026, Airbus also announced an agreement to acquire the British company Ultra Cyber Ltd, thereby further expanding its own cyber reach in the United Kingdom.
When these moves are viewed together, it becomes clear that Airbus is building a geographically and technologically distributed cyber pillar across three major European markets – in France, Germany, and the United Kingdom. Such a structure is important not only because of the sale of security solutions to third parties. It is also important because Airbus must protect its own programs, industrial processes, defense systems, connected platforms, and vast supplier network. In a period in which European industrial policy is becoming ever more strongly linked to the resilience of supply chains and digital sovereignty, cyber capabilities are becoming part of industrial strategy, and not merely a protective layer.
What is changing in aviation itself
The modern aviation sector is no longer the closed system it was two or three decades ago. Today’s commercial and defense aircraft are equipped with advanced network architectures, communication modules, sensors, tools for transmitting technical data, and digital service platforms. Manufacturers and operators are increasingly using data to plan maintenance, optimize fuel, monitor system health, and manage operations. Such progress brings efficiency, but also broadens the attack surface.
In its own expert materials, Airbus has warned that the growth of the connected and digital aircraft has increased the risks of cyberattacks and that attacks on connectivity elements are among the most serious and most influential threats. That does not mean that critical flight systems are left unprotected, but that security increasingly needs to be viewed across the entire chain – from manufacturers and suppliers, through airports and operators, to maintenance and communication with external services. In other words, the problem is not only “can someone hack a plane,” but also whether someone can disrupt operations, logistics, data flows, maintenance processes, or the reliability of the digital infrastructure on which aviation now depends.
That this challenge is not specific only to Airbus is also confirmed by Boeing. In its official security materials, Boeing warns that in today’s rapidly changing digital environment, constant adaptation is necessary in order to protect infrastructure, products, services, and people from cyber threats. This shows that the world’s two largest manufacturers are facing not only competition in deliveries and technology, but also the same structural question: how to maintain safety and trust in an industry that is increasingly dependent on networked systems.
Regulators no longer treat cybersecurity as a secondary issue
The importance of this topic can also be seen in the regulatory approach. The European Union Aviation Safety Agency, EASA, has in recent years significantly increased its focus on information security and cyber resilience. EASA has announced that Part-IS, the regulatory framework for information security in civil aviation, introduces requirements for identifying and managing information security risks that can affect information and communication technology systems and the data used in civil aviation. In practice, this means that cyber risk is being linked ever more clearly to the safety of operations, and not only to the classic protection of business networks.
EASA further emphasized the importance of the topic by publishing the EPAS 2026 plan, in which it defines strategic priorities and measures to mitigate risks in the European aviation system. In parallel, the agency had already launched a research project in 2024 on aviation resilience to cyber threats and on the cyber threat landscape, with the aim of identifying threats that may have a negative impact on the safety of flight operations. This regulatory direction is important for both manufacturers and operators because it shows that cybersecurity is entering the very core of safety standards.
At the global level as well, the trend is similar. The International Civil Aviation Organization, ICAO, states in its strategy that the goal of global civil aviation is to become resilient to cyberattacks, safe and secure, while continuing innovation and growth. The strategy relies on pillars such as international cooperation, legislation and regulation, cybersecurity policies, information sharing, incident response, and strengthening security culture. This is an important signal that the topic is no longer being viewed through isolated incidents, but as an integral part of air traffic management and aviation infrastructure.
A growing number of incidents and pressure on the industry
Industry and security reports in recent years have warned that aviation is becoming an increasingly attractive target for attackers. Among the reasons are the high value of targets, complex supply chains, a large number of external partners, reliance on digital services, and the high sensitivity of the public to disruptions. Even an incident that does not endanger the flight itself but disrupts operations, ticket sales, boarding, baggage handling, or communication with passengers is enough for the consequences to become immediately visible.
This was also shown at the end of 2024, when Japan Airlines was hit by a cyberattack that caused delays to some domestic and international flights and temporarily disrupted operations. Although there were then no signs that flight safety had been compromised, the incident served as a reminder that digital disruptions can have an immediate operational effect on traffic, passengers, and the carrier’s reputation. Similar events increase the pressure on manufacturers, airlines, airports, and technology suppliers to view cybersecurity as a continuous process, and not as a one-time compliance exercise.
An additional signal was also given by Thales, which ahead of the Paris Air Show 2025 announced that, according to its threat report, the number of cyberattacks targeting the aviation sector had increased by 600 percent in one year. Such figures should be read with caution because methodologies among reports are not always identical, but the trend they describe matches what regulators and companies are stating: attacks are more frequent, broader, and more complex, and the sector can no longer rely only on classic IT defensive patterns.
What Airbus gains from this on the market
For Airbus, the acquisition of Quarkslab has at least four levels of benefit. The first is technological: it gains a team with deep research and operational knowledge in the field of vulnerabilities, testing, and the protection of complex digital systems. The second is market-based: it strengthens the offering for defense, government, and industrial clients for whom the combination of European jurisdiction, proven security expertise, and the ability to work on sensitive systems is important. The third is strategic: Airbus further consolidates its position as a “sovereign” European cyber actor, which is a politically and commercially important message in a period of geopolitical instability. The fourth is internal: it strengthens the protection of its own programs and ecosystem in which defense, space systems, digital services, and civil aviation increasingly overlap.
At the same time, this move also sends a message to the market that competition in aviation will increasingly be driven not only by platforms, performance, and delivery timelines, but also by the resilience of digital infrastructure. In an era in which product security, data reliability, and the protection of communication flows are turning into a sales argument, cyber capabilities are becoming an integral part of industrial credibility.
France and Europe seek their own security anchors
It is no coincidence that Airbus is turning to Quarkslab precisely in France. For years, France has sought to develop domestic cyber capabilities, especially in segments that intersect with defense, strategic industry, and critical infrastructure. In this context, Airbus is not merely a private company, but also an important industrial actor whose decisions have broader technological and political implications. By acquiring Quarkslab, Airbus is not only buying talent and products, but also strengthening the French component of its own European cyber mosaic.
For Europe, this is important also because of the broader debate on digital autonomy. In recent years, Brussels, national governments, and major industrial systems have been speaking ever more openly about the need to keep sensitive digital capabilities within the European technological space. In sectors such as defense, space, critical infrastructure, and aviation, that debate carries particularly great weight. Cybersecurity is no longer merely a services market, but also a question of the strategic ability of states and industry to oversee, protect, and develop their own systems.
Will this change the safety of passenger aviation
The direct effect of a single acquisition on the everyday experience of passengers will not be immediate or easily visible. Because of this news, passengers will not immediately notice a new service or a change in the cabin. But in the long run, precisely such moves determine how resilient the aviation system will be to disruptions that arise outside the classic mechanics and flight operations. The future of safety will no longer depend only on aircraft design, engine maintenance, and crew work, but also on how well protected the data, networks, interfaces, service channels, and supply chain are.
That is why Airbus’s expansion in the field of cybersecurity is more than a corporate transaction. It shows how the aviation industry is adapting to the fact that security in the 21st century is also defended with code, network architecture, vulnerability management, and the ability to respond quickly to incidents. In that new environment, the advantage will not belong only to whoever builds the more efficient or more sought-after aircraft, but also to whoever succeeds in proving that it can protect all the digital layers on which modern aviation rests.
Sources:- - Airbus – announcement of the planned acquisition of Quarkslab in France, with the transaction expected to close during 2026. (link)
- - The Wall Street Journal – report on Airbus’s agreement to buy Quarkslab, including information on the company’s profile and the expected completion of the deal. (link)
- - Quarkslab – official information about the company, its field of work, research approach, and locations. (link)
- - Airbus – announcement of the completion of the infodas acquisition in September 2024 and the strengthening of the cyber portfolio. (link)
- - Airbus – announcement of the agreement to acquire Ultra Cyber Ltd in the United Kingdom in March 2026. (link)
- - Airbus – overview of its cyber business and emphasis on European specialization for defense and aviation systems. (link)
- - Airbus – expert overview of how the growth of aircraft connectivity and digitalization increases cyber risks. (link)
- - Boeing – official material on the need to protect infrastructure, products, services, and people from cyber threats. (link)
- - EASA – Part-IS regulatory framework and official explanations of information security obligations in civil aviation. (link)
- - EASA – EPAS 2026 plan and research project on aviation resilience to cyber threats. (link; link)
- - ICAO – global strategy and action plan for civil aviation cybersecurity. (link; link)
- - Reuters / AP – reports on the cyberattack on Japan Airlines at the end of 2024 and the consequences for operations. (link; link)
- - Thales – report and press release on the sharp increase in the number of cyberattacks targeting the aviation sector. (link)
Find accommodation nearby
Creation time: 2 hours ago