Coin-Sized Device Can Hijack Boeing 737 Flight Systems in Under a Minute

Ia.Acs.Au

Coin-Sized Device Can Hijack Boeing 737 Flight Systems in Under a Minute

First seen 18 Aug 2026, 02:33 UTC • •66.5

Article Content

1 / 4

Browse articles

ThreatCluster •August 19, 2026 at 00:07 UTC

•A coin-sized device can hijack Boeing 737 flight systems in under 60 seconds.
•The attack requires physical access to the aircraft's communication ports.
•Boeing has acknowledged the vulnerability and collaborated with researchers since 2020.

Researchers from UC San Diego and Oberlin College demonstrated a proof-of-concept attack using a coin-sized device that can hijack critical flight systems in Boeing 737 aircraft. By plugging the device into a hardwired communications channel, attackers can manipulate flight data, potentially redirecting flights or causing unsafe takeoff conditions. The attack requires physical access to the aircraft, which can be gained during maintenance or while parked at a gate. The vulnerability was disclosed to Boeing in 2020, and the company has since collaborated with the researchers to evaluate security measures. The Boeing 737 is widely used, with approximately 8,000 units in service globally. Boeing stated that the research does not pose an immediate threat to operational safety, but they take security concerns seriously and appreciate responsible disclosure.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 58d ago How this analysis works

Timeline

2020-01-01

Vulnerability disclosed to Boeing

Researchers informed Boeing about the potential security risk associated with physical access to aircraft systems.

2026-08-13

Research presented at USENIX Security Symposium

The research team showcased their findings, demonstrating the exploit on a testbed using Boeing 737 components.

2026-08-18

Research findings published in Information Age

The exploit was detailed, highlighting the potential for flight manipulation using a coin-sized device.

2026-08-18

Boeing issues statement on vulnerability

Boeing confirmed the research findings and stated that they do not pose a threat to operational safety.

More articles in this cluster (3)

Threat Graph

4 entities, 3 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Malware

Organization (2)

Boeing
University Of California San Diego

Affected Platform (1)

Boeing 737

Relationships

Malware targets Boeing 737
Malware related to Boeing
Malware related to University Of California San Diego

Following this threat?

Track Boeing in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Zero-Day Exploit in BeyondTrust Remote Support Disclosed BeyondTrust disclosed a critical vulnerability, CVE-2026-102764, in its Remote Support product, exploited by the suspected China-linked group ARMORY CASTLE. The flaw, with a CVSS score of 9.3, allows attackers to perform arbitrary file uploads and gain host-level control without requiring credentials or user…

CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…