Weekly Cybersecurity Roundup Covers Boeing 737 Device Demo, Refrigeration Flaws
Summary
SecurityWeek’s roundup covers a researcher demonstration of a device compromising Boeing 737 systems, patched refrigeration-controller vulnerabilities, investigations into possible intrusions, a CISA Gunra ransomware advisory and rising industrial ransomware incidents.
Key points
- Researchers demonstrated that a concealed device attached to an external port could compromise Boeing 737 systems and spoof readings or alter a flight plan; the article says aircraft safety systems are likely to prevent direct harm.
- LexisNexis took Diligence, Metabase API and Newsdesk offline after unusual activity on third-party-managed servers and said it disconnected the systems to contain the threat; the investigation is ongoing.
- Claroty’s Team82 reported 23 vulnerabilities in Copeland XWEB Pro controllers, including flaws that could be chained for root-level remote code execution. It also found remote-code-execution flaws in Danfoss AK-SM 800A controllers; both vendors patched the reported vulnerabilities.
- Delta said an unauthorized Wi-Fi network was active briefly on a flight, but the aircraft and its systems were not at risk and no Delta system was hacked. The crew disabled in-flight Wi-Fi for about 30 minutes; the suspected individual remains unidentified.
- Uber Freight is investigating unauthorized access after the Helix group claimed it stole nearly one million files. The company said operations were not disrupted and its systems remained operational; the claim is not independently confirmed in the article.
- CISA issued a StopRansomware advisory on Gunra ransomware. Dragos reported 1,140 ransomware incidents affecting industrial organizations in Q2 2026, up 12% from the previous quarter, and found no cases of direct manipulation of industrial control systems.
- Rapid7 said it would cut 314 jobs, or 12% of its workforce, as it restructures around efficiency and its core platform.
Article Details
- Event Type
- Weekly cybersecurity roundup covering suspected intrusions, ransomware, vulnerability disclosures, and security research.
- Impact
- A North Korean IT worker reportedly obtained employment at an unnamed US federal agency. Researchers demonstrated a hardware-based compromise of Boeing 737 systems that could spoof readings or alter a flight plan, though the article says aircraft safety systems are likely to prevent direct harm. Vulnerabilities in Copeland XWEB Pro and Danfoss AK-SM 800A controllers could enable remote code execution and manipulation of refrigeration equipment; both vendors patched the reported flaws. LexisNexis took three services offline to contain unusual activity on third-party-managed servers. Uber Freight is investigating unauthorized access after Helix claimed it stole nearly 1 million files; the company reported no operational disruption.
People
Threat Actors
Malware
Vendors
ClarotyClaroty’s Team82 found vulnerabilities in two widely used commercial refrigeration systems.CopelandThe researchers discovered 23 vulnerabilities in Copeland XWEB Pro controllers, including ones that can be chained to bypass security controls and achieve root-level RCE.DanfossTeam82 also identified multiple vulnerabilities in Danfoss AK-SM 800A refrigeration controllers, including RCE flaws.LexisNexisLexisNexis probing another potential hackRapid7Rapid7 lays off 12% of workforce
Products
Boeing 737Hacking a Boeing 737Copeland XWEB ProThe researchers discovered 23 vulnerabilities in Copeland XWEB Pro controllers, including ones that can be chained to bypass security controls and achieve root-level RCE.Danfoss AK-SM 800ATeam82 also identified multiple vulnerabilities in Danfoss AK-SM 800A refrigeration controllers, including RCE flaws.DiligenceLexisNexis took its Diligence, Metabase API, and Newsdesk services offline last week after identifying unusual activity on servers managed by a third-party vendor.Metabase APILexisNexis took its Diligence, Metabase API, and Newsdesk services offline last week after identifying unusual activity on servers managed by a third-party vendor.NewsdeskLexisNexis took its Diligence, Metabase API, and Newsdesk services offline last week after identifying unusual activity on servers managed by a third-party vendor.
Countries
Industries
CybersecuritySecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader threat landscape.GovernmentGovernment AI platform deal sparks outrageManufacturingDragos identified 1,140 ransomware incidents affecting industrial organizations worldwide in Q2 2026, a 12% increase from the previous quarter, with manufacturing accounting for 747 incidents.