The Department of Homeland Security has reportedly told a cyber security conference it was able to hack the internal systems of a Boeing 757 sitting on the ramp at Atlantic City Airport with no help from anyone on board or anywhere near the aircraft. “We got the airplane on Sept. 19, 2016. Two days later, I was successful in accomplishing a remote, non-cooperative penetration,” DHS cyber security expert Robert Hickey is quoted as saying by Avionics Today. “[Which] means I didn’t have anybody touching the airplane, I didn’t have an insider threat. I stood off using typical stuff that could get through security and we were able to establish a presence on the systems of the aircraft.” Hickey was speaking at the CyberSat Summit in Virginia Nov. 8.
How the hack was done is classified but Hickey suggested it gave the hackers comprehensive access to the aircraft’s systems. Hickey noted that newer aircraft like the Boeing 737 MAX and 787 and Airbus’s new A350 have more robust security but 90 percent of the fleet has the same vulnerabilities as that 757. Two years ago a security researcher claimed to have gained access to an airliner’s flight systems through its entertainment system but those claims were never verified.