DHS Warning: Small Aircraft are Ripe for Hacking

The Department of Homeland Security issued an alert Tuesday warning that small aircraft are vulnerable to hackers that can gain physical access to a plane. It warned that a hacker can easily manipulate aircraft telemetry data, which can result in loss of control of the airplane. The bulletin was...

airplane-pictures.net XSS vulnerability

Open Bug Bounty ID: OBB-579612 Description| Value ---|--- Affected Website:| airplane-pictures.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

airplane-pictures.net XSS vulnerability

Open Bug Bounty ID: OBB-441054 Description| Value ---|--- Affected Website:| airplane-pictures.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

The FAA Is Arguing for Security by Obscurity

In a proposed rule by the FAA, it argues that software in an Embraer S.A. Model ERJ 190-300 airplane is secure because it's proprietary: In addition, the operating systems for current airplane systems are usually and historically proprietary. Therefore, they are not as susceptible to corruption...

3D Airplane Flight Simulator - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 3D Airplane Flight Simulator published at the 'play' market has multiple vulnerabilities...

Airplane Fly Hawaii - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Airplane Fly Hawaii published at the 'play' market has multiple vulnerabilities...

Airplane Pilot Simulator 3D - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Airplane Pilot Simulator 3D published at the 'play' market has multiple vulnerabilities...

Airplane Pilot Car Transporter - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Airplane Pilot Car Transporter published at the 'play' market has multiple vulnerabilities...

Airplane! - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Airplane! published at the 'play' market has multiple vulnerabilities...

FBI: Banned Security Researcher Admitted to Hacking Plane In-Flight

A security researcher who was pulled out from a United Airlines flight last month had previously admitted to Federal Bureau of Investigation FBI that he had taken control of an airplane and made it fly briefly sideways. Chris Roberts, the founder of One World Labs, was recently detained, question...

CVE-2014-1353

Lock Screen in Apple iOS before 7.1.2 does not properly manage the telephony state in Airplane Mode, which allows physically proximate attackers to bypass the lock protection mechanism, and access a certain foreground application, via unspecified vectors...

Design/Logic Flaw

Lock Screen in Apple iOS before 7.1.2 does not properly manage the telephony state in Airplane Mode, which allows physically proximate attackers to bypass the lock protection mechanism, and access a certain foreground application, via unspecified vectors...

CVE-2014-1353

Lock Screen in Apple iOS before 7.1.2 does not properly manage the telephony state in Airplane Mode, which allows physically proximate attackers to bypass the lock protection mechanism, and access a certain foreground application, via unspecified vectors...

CVE-2014-1353

CVE-2014-1353 is an Apple iOS lock-screen vulnerability affecting iOS versions prior to 7.1.2. The issue is a state management flaw in how telephony state is handled while Airplane Mode is active, allowing a physically proximate attacker to bypass the lock and access a foreground application. The...

iPhone Fingerprint scanner hack allows attacker to hijack Apple ID using Flight Mode

A German security firm SRL claims a vulnerability in Touch ID Fingerprint Scanner and iCloud allows a hacker to access a locked device and potentially gain control over an owner’s Apple ID. SRL points out that Airplane mode can be enabled on a stolen phone from the lockscreen, which turns off...

China Builds World's Fastest Supercomputer

China has developed a new supercomputer known as Tianhe-2 which is twice as fast as US and Japanese systems has been measured at speeds of 30.65 petaflops or 74 percent faster than the current holder of the world's-fastest-supercomputer title. Titan, the U.S. Department of Energy's fastest...

Hackers Probably Can't Hijack an Airplane with Software

An alarming dispatch from the Hack In The Box security conference in Amsterdam arrived on Wednesday: a hacker says he's found a way to take over airplane controls. That's probably not true. At least according to the Federal Aviation Administration FAA, the European Aviation Safety Administration...

Hackers Probably Can't Hijack an Airplane with Software

An alarming dispatch from the Hack In The Box security conference in Amsterdam arrived on Wednesday: a hacker says he's found a way to take over airplane controls. That's probably not true. At least according to the Federal Aviation Administration FAA, the European Aviation Safety Administration...

Researcher Demonstrates Commercial Airplane Navigation System Compromise

As if hurtling through the air at 500 miles per hour in an enormous meshing of metal and wires wasn’t terrifying enough, security researcher Hugo Teso presented a practical demonstration of a remote airline attack in which he took complete control of a virtual aircraft’s flight management system...

On the Network Solutions Hack and Smartphone Attacks

In the long-awaited return of the News Wrap podcast, Threatpost’s newest editor, Paul Roberts, makes his debut as he and Dennis Fisher discuss the Network Solutions parked domains hack, the troubling attacks emerging on smartphone platforms and the odd story of a Trojan-infected PC being linked t...