Boeing Acknowledges Collaboration in Addressing Potential Vulnerability

Boeing's Product Security Engineering (PSE) team is credited for its swift action in addressing a potential vulnerability reported by cybersecurity research group Pen Test Partners in 2021. The report was submitted through Boeing's Vulnerability Disclosure Program (VDP), which encourages responsible reporting of possible vulnerabilities in Boeing products, systems, assets, software, and services.

The PSE team reviewed the report and decided to make a security enhancement, adding Pen Test Partners to its Security Hall of Fame. This program recognizes the first person or group to disclose a qualifying vulnerability.

'It's important that we continue to sustain the resilience of our products throughout their lifecycle through initiatives such as the Vulnerability Disclosure Program,' said Laurel Matthew, risk management leader within Boeing's PSE group. Multiple layers of protection, including software, hardware, and network architecture features, are designed and installed to ensure the security of all Boeing critical flight systems.

Ken Munro, founder of Pen Test Partners, praised Boeing for its openness and cooperation in addressing the vulnerability. 'Boeing was very open,' he said. 'We disclosed what we found privately to them, and they received it well. They were very helpful in interacting with us, which is a big kudos to them.'