Boeing 737 Hacking Demonstrated, LexisNexis Investigates Third Potential Breach

Boeing 737 Vulnerability Revealed

Academic researchers successfully demonstrated a method to compromise systems on a Boeing 737 using a concealed, coin-sized hardware device. This device, when attached to an external port, grants malicious actors remote access to the aircraft's systems. While safety systems are expected to prevent direct physical harm, an attacker could spoof critical data such as air temperature readings and aircraft weight.

Potential Flight Plan Manipulation

The demonstrated vulnerability extends beyond data spoofing, potentially allowing an attacker to change a plane's flight plan and divert it from its intended route. This highlights a significant security concern for aviation, emphasizing the need for robust physical and digital security measures for aircraft systems.

LexisNexis Investigates New Security Incident

LexisNexis recently took its Diligence, Metabase API, and Newsdesk services offline after detecting unusual activity on servers managed by a third-party vendor. The company disconnected these systems to contain the potential threat. LexisNexis clarified that its Metabase API product is distinct from Metabase Cloud, which recently disclosed a zero-day vulnerability.

Third Potential Breach for LexisNexis

This incident marks a potential third data breach for LexisNexis, raising concerns about the company's cybersecurity posture and its reliance on third-party vendors. The investigation is ongoing to determine the nature and extent of the unusual activity.