Coin-Sized Device Can Hijack Boeing 737 Flight Systems in Under a Minute

Coin-Sized Device Can Hijack Boeing 737 Flight Systems in Under a Minute

First seen 18 Aug 2026, 02:33 UTC today.ucsd.eduIa.Acs.Auwww.boeing.com 83% similarity 66.5

Article Content

Browse articles
ThreatCluster

Researchers from UC San Diego and Oberlin College demonstrated a proof-of-concept attack using a coin-sized device that can hijack critical flight systems in Boeing 737 aircraft. By plugging the device into a hardwired communications channel, attackers can manipulate flight data, potentially redirecting flights or causing unsafe takeoff conditions. The attack requires physical access to the aircraft, which can be gained during maintenance or while parked at a gate. The vulnerability was disclosed to Boeing in 2020, and the company has since collaborated with the researchers to evaluate security measures. The Boeing 737 is widely used, with approximately 8,000 units in service globally. Boeing stated that the research does not pose an immediate threat to operational safety, but they take security concerns seriously and appreciate responsible disclosure.

Key Points: • A coin-sized device can hijack Boeing 737 flight systems in under 60 seconds. • The attack requires physical access to the aircraft's communication ports. • Boeing has acknowledged the vulnerability and collaborated with researchers since 2020.

ThreatCluster AI How this analysis works

Timeline

2020-01-01
Vulnerability disclosed to Boeing
Researchers informed Boeing about the potential security risk associated with physical access to aircraft systems.
Article 1
2026-08-13
Research presented at USENIX Security Symposium
The research team showcased their findings, demonstrating the exploit on a testbed using Boeing 737 components.
Article 1
2026-08-18
Research findings published in Information Age
The exploit was detailed, highlighting the potential for flight manipulation using a coin-sized device.
Article 2
2026-08-18
Boeing issues statement on vulnerability
Boeing confirmed the research findings and stated that they do not pose a threat to operational safety.
Article 3

Community

Browse all →