Tiny Device Can Hijack Boeing 737 Systems

Researchers have unveiled a significant aviation cybersecurity vulnerability, demonstrating that a Boeing 737's autopilot can be hijacked using a small, inexpensive physical implant. This coin-sized, Wi-Fi-enabled device, costing less than $100, can be installed in under a minute into an externally accessible port on the aircraft. Once connected, it can send malicious signals to critical systems, altering autopilot commands and spoofing vital flight information displayed to pilots. These subtle changes could have severe consequences, including runway overruns or mid-flight diversions.

The research, a decade in the making, highlights a critical blind spot in aircraft security. While planes have largely been immune to remote cyberattacks, this physical access method presents a practical threat. The scientists, working closely with Boeing, have urged the aviation industry to implement immediate physical security fixes, such as epoxying accessible ports, to prevent such sophisticated sabotage. They emphasize that while pilots could potentially override some attacks, the confusion and uncertainty caused could be dangerous.