Daily Cyber News – September 23, 2025

Europe’s aviation sector reeled this weekend as a ransomware attack on Collins Aerospace disrupted check-in systems at major airports, from Heathrow to Brussels to Berlin. At the same time, automaker Stellantis confirmed a customer data breach tied to a third-party platform, raising alarms across the supply chain. Microsoft also disclosed a critical flaw in Entra ID that could have let attackers impersonate Global Administrators across tenants — a stark reminder of how fragile identity systems can be. Add in fake GitHub apps pushing the Atomic infostealer to Mac users and a new Windows “EDR-Freeze” technique suspending endpoint defenses, and it’s clear today’s headlines carried weight for both enterprises and individuals.In this first edition of the BMC Daily Cyber Brief, we unpack these developments in plain English — what happened, why it matters, and what defenders should do next. You’ll also hear about DHS’s misconfigured data hub, the ShadowLeak exploit against AI agents, and the cyberattack that froze Jaguar Land Rover’s production lines. It’s the signal you need in under 16 minutes, with context you can act on today. Produced by BareMetalCyber.com.