Opens in a new tab

Breaking news

Wizz Air Signals Further Cyprus Growth After Launching Madrid Route

Madrid Debut Underscores Wizz Air’s Cyprus Strategy

Wizz Air’s launch of its new Larnaca-Madrid service in September marks more than the addition of another destination. It reflects a broader push by the low-cost carrier to deepen its Cyprus footprint, strengthen year-round connectivity and expand its presence in one of its most strategically important Mediterranean markets.

In an exclusive interview with the Cyprus Mail, Wizz Air network director Andras Szabo said the airline sees strong potential for sustained travel between Cyprus and Spain, particularly beyond the traditional summer peak.

“We are very excited about the launch of Madrid,” Szabo said. “It is an important addition to our network from Larnaca and another step in strengthening the connectivity between Cyprus and Spain.”

Why Spain Matters For Wizz Air

The new route gives Cyprus travellers direct access to one of Europe’s major capitals, while also making Cyprus more accessible to Spanish visitors throughout the year.

According to Szabo, the Madrid service builds on the positive performance of the airline’s Larnaca-Barcelona route and reinforces Wizz Air’s confidence in the Spanish market.

“Madrid gives passengers in Cyprus affordable, direct access to one of Europe’s major capitals, while giving Spanish travellers a convenient way to discover Cyprus, as an all-year destination,” he said.

“It also builds on the positive development we have seen with Barcelona. We see good potential in the Spanish market, and Madrid is a very strong addition to our network from Larnaca.”

Demand, Cost Discipline And Route Selection

For Wizz Air, route expansion begins with one question: where is the demand?

Szabo said the airline’s network decisions are driven by passenger behaviour, commercial viability and the ability to offer affordable and reliable connectivity. Airport charges also play a significant role, given the importance of cost discipline in the ultra-low-cost model.

“When we look at a new route, we always start with demand,” he explained. “We analyse where passengers want to travel, where there is sufficient demand and where we can provide affordable and reliable connectivity.”

He added: “Furthermore, we put significant emphasis on airport charges. Keeping our overall costs low allows us to offer affordable fares.”

That framework, Szabo said, makes routes such as Madrid commercially attractive, especially when combined with early signs of success from Barcelona.

Connectivity As An Economic Lever

Wizz Air sees the value of its Cyprus network extending well beyond tourism. Direct routes support business travel, family visits, cultural links and shorter leisure trips, while helping Cyprus strengthen its position as a connected, year-round destination.

“Connectivity is at the heart of what we are doing in Cyprus,” Szabo said. “Madrid adds another major western European capital to the destinations available directly from Larnaca, giving passengers more choice and flexibility.”

He stressed that direct air links create opportunities on both sides of the market. For Cyprus, the route can help attract inbound visitors from Spain. For Cypriot residents, it offers a more convenient and affordable way to travel abroad.

“There are also wider benefits,” he said. “Better connectivity supports tourism spending, business travel, trade and cultural and family links.”

Extending Cyprus Beyond The Summer Season

One of Wizz Air’s central themes in Cyprus is the need to broaden demand beyond the summer months. Szabo said the airline believes the island has substantial untapped potential during the shoulder and winter periods.

“This is an important point,” he said. “Cyprus has traditionally had a strong summer season, but we believe there is considerable potential to develop travel during the shoulder and winter periods as well.”

“We do not see Cyprus simply as a summer destination,” he added.

That view is shaping the carrier’s network strategy. By adding routes and frequencies that work year-round, Wizz Air aims to support more consistent traffic flows and reduce the industry’s dependence on seasonal peaks.

Larnaca Remains A Core Base

The Madrid launch is part of a wider expansion from Larnaca, where Wizz Air now serves nearly 40 destinations, including Budapest, London, Prague, Rome, Milan, Tel Aviv and Warsaw.

Szabo described Cyprus as a long-established and strategically important market for the airline.

“Cyprus is a very important and long-established market for Wizz Air, and we continue to see considerable potential here,” he said.

He pointed to recent network moves including the return of the Larnaca-Athens service on a double-daily basis, as well as frequency increases on Barcelona, Thessaloniki and Yerevan. The airline also added 57,500 seats from Larnaca for August and September, reflecting confidence in continued demand.

“Cyprus is one of our key markets in the Mediterranean region, and Larnaca is an important base for Wizz Air,” Szabo said. “We have steadily expanded our presence here, and the recent years’ increase in capacity demonstrates our confidence in the market.”

For Wizz Air, the objective is not simply to add destinations, but to build a network that serves a broad mix of travellers and remains commercially sustainable.

What Comes Next For Madrid

The Madrid route currently operates three times a week, and Wizz Air is optimistic about its prospects. Even so, Szabo said the airline will wait to see how bookings and passenger demand develop before deciding whether to add more capacity.

“We are optimistic about Madrid,” he said. “Our experience from the Barcelona route is encouraging.”

“If Madrid performs strongly, we will assess whether additional frequency or capacity makes commercial sense,” he added. “It is too early to make a specific commitment, but where we see sustainable demand, we will look at the opportunities.”

That measured approach reflects Wizz Air’s broader network philosophy: expand where demand is proven, keep costs tightly controlled and scale only when the economics are compelling.

A Partnership Model For Growth

Szabo said Wizz Air’s expansion in Cyprus has been supported by strong cooperation with airport and tourism stakeholders, which he described as critical in a challenging aviation environment.

“We have a strong relationship with the airport and tourism stakeholders in Cyprus, and the response to our expansion has been very positive,” he said.

“For us, cooperation with airports and tourism authorities is very important when developing new routes,” he added. “Successful route development is a partnership, and we are pleased with the support we have received in Larnaca.”

Hermes Airports also welcomed the new Madrid link. Maria Kouroupi, Director of Aviation Development, Marketing & Communication at Hermes Airports, said the route expands travel options and strengthens the airport’s network.

“This new connection is the result of our consistent efforts and close cooperation with Wizz Air, a long-standing partner of Hermes Airports,” she said.

Beyond Passenger Traffic

Wizz Air’s Cyprus strategy is not limited to route expansion. The airline has also extended its Wizz Air Pilot Academy to candidates in Cyprus, with an open day in Nicosia attracting strong interest from prospective pilots.

Szabo said the response was encouraging and that successful applicants would begin training in October.

“We offer a clear, guided pathway to a career in aviation, from the very first application all the way to the flight deck through high-quality training and a defined employment prospect at Wizz Air,” he said.

He added that the initiative fits into the airline’s long-term commitment to Cyprus and its aim of developing local aviation talent.

“Our plans with Cyprus are long-term,” Szabo said. “We are committed to nurture local talent and to build a sustainable pipeline of future pilots in the region.”

Wizz Air has also backed local initiatives including TELETHON’s Wings of Hope and sports activities aimed at supporting tourism.

For the airline, the message is clear: Cyprus is not a seasonal market, but a long-term growth opportunity.

AI Finds Two Critical PHP Security Flaws, Prompting Urgent Website Shutdowns Across Europe

Artificial intelligence has helped expose two serious security flaws in PHP, the programming language powering much of the internet, prompting organisations across Europe to take websites and digital services offline while they worked to prevent potential attacks.

The vulnerabilities had remained undetected for more than a decade. Advanced AI systems from OpenAI and Google helped turn a suspected weakness into a working exploit, highlighting how quickly AI could accelerate cyber threats.

Europe Moves To Contain The Risk

The Netherlands took down its DigiD digital identity system, the Overheid.nl government portal and the website of the lower house of parliament. The Port of Rotterdam, hospitals, the country’s five largest political parties and even the Dutch National Cyber Security Centre also took websites offline.

Elsewhere, Finland’s state IT provider Valtori suspended government web services, France’s Interior Ministry placed local administration websites into maintenance mode, and Germany’s federal IT service, ITZBund, took several portals offline.

CERT-EU advised organisations unable to patch immediately to take affected websites offline. The European Commission, ENISA, CERT-EU, Europol and national cyber response teams subsequently urged organisations to act without delay, particularly on internet-facing systems.

Why PHP Matters So Much

Created in the early 1990s, PHP remains one of the web’s most widely used programming languages. Security firm Wiz Research estimates that it runs behind roughly seven in 10 websites, including platforms such as WordPress, Drupal and Joomla.

PHP handles essential functions such as logins, payment processing and content delivery, making vulnerabilities in its code a potential global risk. According to Wiz, every PHP version released over the past decade is affected by at least one of the flaws.

A fix was released on Wednesday. The PHP Foundation urged teams to update immediately to patched versions PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35. Older versions no longer receive official support and should be considered exposed unless vendors have backported the fix, CERT-EU warned.

Websites and applications, from the Paris police website to a Pokémon sleep tracker, temporarily went offline as developers secured their systems.

How AI Turned A Theory Into A Working Attack

The vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619 and rated 9.2 out of 10 in severity, affect PHP’s memory management and error handling. Under specific conditions, an attacker could exploit a memory-limit issue to execute malicious code remotely without logging in.

The PHP Foundation said developers first identified signs of the problem during an external audit in 2024. Although researchers developed a theoretical exploit, progress towards a practical attack path and a fix repeatedly stalled as the small core team weighed the risks. The foundation later called the delay “a structural failure”.

In August, security firm Calif, working on an OpenAI-funded audit of PHP’s source code and using OpenAI’s GPT-5.6 Sol model, reported a working remote attack. OpenAI independently identified the issue that day. Two weeks later, Wiz developed additional attack paths using its Wiz Atlas tool alongside Google’s Gemini 4 Argon and GPT-5.6 Sol.

“With frontier AI models and the right tools, a single researcher completed in a week what previously would have taken a world-class team months of work,” Wiz researchers wrote.

OpenAI called the discovery “one of the most impactful vulnerabilities in recent memory”, saying AI could now identify security flaws with “internet-scale impact”.

The findings were kept confidential while a fix was prepared. However, the two CVE identifiers appeared on online forums and social media on Tuesday afternoon. PHP brought forward its release by a day, while Calif mistakenly published and then deleted a video demonstrating its proof of concept against multiple targets. Copies quickly spread, according to the PHP Foundation.

“The moment all the information’s out there, people can weaponise it very, very quickly,” Steve Kerrison, a senior lecturer in cybersecurity at the Singapore campus of James Cook University, told AFP.

Has Anyone Been Hacked Yet?

Taking a website offline does not necessarily mean it has been compromised. Dimitrios Salampasis of Australia’s Swinburne University of Technology said shutdowns can be a responsible precaution while patches are applied.

The PHP Foundation said its security team reviewed the proof-of-concept code circulating after the leak and found no functional exploit at the time of release.

However, Cloudflare reported attack traffic targeting its customers on Wednesday, while CERT-EU warned that the public availability of technical details could encourage attackers to probe vulnerable systems.

Large organisations may patch quickly, but smaller operators could remain exposed for weeks or months. Personal blogs and small business websites could be hijacked to distribute malware, send spam or host malicious content.

The Bigger Risk Goes Beyond The Patch

Even after systems are updated, stolen data could be used in phishing attacks to obtain passwords, payment details and other sensitive information.

Third-party dependencies add another risk: websites may remain exposed if the providers they rely on fail to patch their own systems. “Even though you patched yourself … you’re still unsecure,” said Rahat Masood, a senior lecturer in cybersecurity at the University of New South Wales in Sydney.

The incident also raises questions about the resources behind PHP’s security. The language supports government services, banks and online retailers worldwide, yet its security depends heavily on a relatively small group of foundation-funded developers and volunteers.

AI can identify and demonstrate vulnerabilities faster than ever, but fixing them without disrupting the systems that depend on them still requires experienced engineers and a more resilient approach to software security.

Aretilaw firm
The Future Forbes Realty Global Properties
eCredo
Uol

Become a Speaker

Become a Speaker

Become a Partner

Subscribe for our weekly newsletter