Data Breach of Civil Aviation Authority of Papua New Guinea

Overview On 30 May 2025, a threat actor claimed to have exploited a SQL injection vulnerability in the Civil Aviation Authority of Papua New Guinea (CAAPNG) system. Evidence shared on dark web forums suggested unauthorized access to aviation-related data, with the attacker openly seeking collaborators to further exploit the breach. Though this event targets a […]