itwbennett writes:
Security researcher Chris Kubecka has identified (and reported to Boeing and the Department of Homeland Security back in August) a number of security vulnerabilities in Boeing’s networks, email system, and website. “[T]he company’s failure to remedy the security failures she reported demonstrate either an unwillingness or inability to take responsibility for their information security,” writes JM Porup for CSO online.
The vulnerabilities include a publicly exposed test developer network, a lack of encryption on the boeing.com website, failure to use DMARC for email security, and, perhaps most notably, an email server infected with malware.
For its part, Boeing says that the vulnerabilities Kubecka reported are “common IT vulnerabilities — the type of cyber-hygiene issues thousands of companies confront every day” and that the company has “no indication of a compromise in any aviation system or product that Boeing produces.” What Porup’s reporting and Kubecka’s research clearly shows, however, is how poor information security practices can become aviation security risks.
of this story at Slashdot.
Source:: Slashdot