Turbulence at Air Serbia, the latest airline under cyber siege

Air Serbia is battling an ongoing cyberattack that has disrupted payslip delivery and appears to have deeply compromised the airline's Active Directory; IT responses have included widespread password resets, network segmentation, removal of internet access for endpoints, and new VPN/software installs. Insiders suspect an infostealer infection with potential personal data exposure and persistent attacker access, though no extortion or ransom demand had been reported at the time.