Researchers reveal coin-sized device can hack Boeing 737 in under a minute

Security researchers showed that a coin‑sized device can hack a Boeing 737 in less than a minute. In a live demo, the team opened an exterior hatch, slipped the device into the aircraft’s maintenance port, and redirected the autopilot or altered the flight plan. The demonstration took under 60 seconds and required no special tools beyond the tiny plug‑in.

The trick matters because modern jets rely on software for navigation, engine control and safety. Boeing 737s use a network of embedded computers that can be accessed through maintenance ports. The researchers exploited a flaw in the firmware that lets a small module inject commands. Once inside, the device can override the flight computer’s instructions. That means a malicious actor with physical access could potentially make the plane deviate from its route, stall, or crash.

The vulnerability was uncovered during a security conference where the researchers examined the aircraft’s maintenance interface. They reverse‑engineered the communication protocol and discovered that the system accepts unsigned commands from the port. The device is just a few millimetres wide, the size of a coin, and can be hidden in a maintenance tool. The researchers warned that the same technique could be used by insiders or foreign agents, especially because many airlines leave maintenance hatches open for routine checks.

Boeing said it will work with the FAA to patch the firmware and tighten physical access controls. Airlines are expected to update their maintenance procedures and install tamper‑evident seals. The FAA may require manufacturers to certify that all maintenance ports are protected by cryptographic authentication. If the fix is delayed, regulators could impose stricter oversight on aircraft software updates. The incident highlights the growing need for secure hardware and software in aviation, where a tiny device can threaten millions of passengers.