Welcome to your essential briefing on threats at the intersection of cybersecurity and critical infrastructure, brought to you by Neeve, the edge cloud security platform for smart buildings, making built spaces secure, intelligent, and sustainable.

This Week’s Cyber Insights

• 🚗 Automotive Sector Faces Catastrophic Cyber Thre …

• 📡 NIST Updates IoT Security Framework for Product …

• ✈️ Everest Gang Claims Collins Aerospace Attack Th …

• 📰 Further Alerts & Insights

🚗 Automotive Sector Faces Catastrophic Cyber Threats

The automotive industry confronts unprecedented cybersecurity challenges following a devastating attack on Jaguar Land Rover, prompting government intervention.

• Catastrophic cyberattack on Jaguar Land Rover disrupted operations significantly

• Financial losses from the attack estimated in the millions of dollars

• Urgent government and industry leader discussions initiated regarding business resilience

• High infrastructure impact designation reflects sector-wide vulnerability concerns

• Experts emphasize need for comprehensive cybersecurity frameworks and advanced technology investments

🤔 The Bigger Picture: 

Automotive manufacturing facilities face similar supply chain and operational technology risks. Critical infrastructure operators should review their business continuity plans and cybersecurity investment priorities.

Read the full article

📡 NIST Updates IoT Security Framework for Product Manufacturers

NIST released the second public draft of foundational cybersecurity activities for IoT product manufacturers, marking a significant update to guidance that shapes how connected devices are secured from design through deployment.

• NIST IR 8259 Revision 1 Second Public Draft expands focus on product cybersecurity capabilities and incorporates feedback from 400+ participants across industry, consumer organizations, academia, and federal agencies.

• Key revisions include splitting existing activities for clarity, adding new "Activity 0" to establish baseline requirements, and strengthening risk assessment and threat modeling integration.

• The framework now includes enhanced references to the NIST Cybersecurity Framework and industry-specific examples to illustrate application across different manufacturing and infrastructure sectors.

• NIST added critical clarification on relationships between customer needs, product goals, and cybersecurity capabilities—addressing manufacturer confusion about translating requirements into technical controls.

• A worked example demonstrating sequential progression through activities while developing a representative IoT product will be released later this fall, with public comment period closing October 31, 2025.

🤔 The Bigger Picture: 

Building automation systems, smart HVAC controllers, and access control platforms are all IoT products that fall under this guidance—facility operators should verify vendor compliance during procurement as this framework shapes the security baseline for every connected device entering your building infrastructure.

Read the full article

✈️ Everest Gang Claims Collins Aerospace Attack That Disrupted EU Airports

A cyberattack on Collins Aerospace disrupted check-in and boarding systems at major European airports including Heathrow, Brussels, and Berlin, with the Everest ransomware gang now claiming responsibility before their leak site mysteriously went offline.

• The September attack targeted Collins' Muse software, forcing numerous flight delays and cancellations as airports reverted to manual operations.

• Collins Aerospace, a subsidiary of RTX (formerly Raytheon Technologies), provides critical avionics, navigation systems, and flight control solutions for civilian and military aircraft.

• The Everest gang's leak site went offline with a "Fatal error" message immediately after claiming the breach, suggesting possible law enforcement takedown or tactical retreat.

• The attack exposes critical supply chain vulnerabilities in defense and aviation infrastructure, as Collins designs components for radar systems and communication platforms used in Western military programs.

🤔 The Bigger Picture: 

Supply chain attacks on defense contractors cascade through entire aviation ecosystems—airports, airlines, and military clients all depend on these interconnected systems. Facility operators should evaluate critical vendor dependencies and implement segmented architectures that limit lateral movement if a supplier is compromised.

Read the full article

Further Alerts & Insights