A BOEING CODE LEAK EXPOSES SECURITY FLAWS DEEP IN A 787'S GUTS

WIRED | 8/7/2019 | Andy Greenberg
srqlolo (Posted by) Level 3
Click For Photo: https://media.wired.com/photos/5d4a1a70f761bd0008d2add6/191:100/pass/security_boeing_160860154.jpg

Late one night last September, security researcher Ruben Santamarta sat in his home office in Madrid and partook in some creative googling, searching for technical documents related to his years-long obsession: the cybersecurity of airplanes. He was surprised to discover a fully unprotected server on Boeing's network, seemingly full of code designed to run on the company's giant 737 and 787 passenger jets, left publicly accessible and open to anyone who found it. So he downloaded everything he could see.

Now, nearly a year later, Santamarta claims that leaked code has led him to something unprecedented: security flaws in one of the 787 Dreamliner's components, deep in the plane's multi-tiered network. Santamarta suggests that for a hacker, exploiting those bugs could represent one step in a multi-stage attack starts in the plane’s in-flight entertainment system and extends to its highly protected, safety-critical systems like flight controls and sensors.

Andy - Greenberg - Security - Writer - Author

Andy Greenberg is a WIRED security writer and author of the forthcoming book, -Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers-.

Boeing flatly denies that sort of attack is possible, and rejects Santamarta's claim of having discovered a potential path to pull it off. Santamarta himself admits that he doesn't have a full enough picture of the aircraft—or access to a $250 million jet—to confirm his claims. But he and other avionics cybersecurity researchers who have reviewed his findings argue that while a full-on cyberattack on a plane's most sensitive systems remains far from a material threat, the flaws uncovered in the 787's code nonetheless represent a troubling lack of attention to cybersecurity from Boeing. They also say that the company's responses have not been altogether reassuring, given the critical importance of keeping commercial airplanes safe from hackers.

Black - Hat - Security - Conference - Today

At the Black Hat security conference today in Las Vegas, Santamarta,...
(Excerpt) Read more at: WIRED
Wake Up To Breaking News!
Sign In or Register to comment.

Welcome to Long Room!

Where The World Finds Its News!