Coin-sized device can hack a Boeing 737

Academic researchers have demonstrated a critical physical-access vulnerability in Boeing 737s using a coin-sized device costing under $100 that can compromise autopilot systems and pilot displays in under 60 seconds through an externally accessible port. This attack vector represents a significant blind spot in aviation cybersecurity that exploits insider or maintenance access, potentially enabling sabotage with greater control and deniability than traditional threats. IT and security leaders must recognize that critical infrastructure protection requires defending against physical access attacks and supply chain vulnerabilities, extending cybersecurity strategy beyond network-based defenses to operational security controls and hardware-level safeguards.