TSA’s airport security systems vulnerable to cyber hacking

The US Transportation Security Administration (TSA) security systems deployed at airport and other security checkpoints are reportedly vulnerable to backdoor hacking, a cyber researcher has revealed.

According to Qualys threat intelligence director Billy Rios, some fundamental weaknesses in Kronos’ time-tracking system and Morpho Detection’s Itemiser 3 facilitate hackers in detecting usernames and passwords.

Rios was quoted by Businessweek as saying: "The most important thing for people to take away is if the device is connected to the Internet and to another network, which is extremely common, you basically have a bridge.

"For non-airports, the risk is still the same.

"If you have a Kronos connected to the Internet and also to your corporate network, well, now you’ve given someone access to your corporate network."

Further, the cyber researcher urged TSA to make proper software reviews before procuring any security systems for deployment.

The Department of Homeland Security’s (DHS) ICS-CERT also issued an advisory recently noting that Morpho Itemiser 3 v 8.17’s tracedetection scanner ‘could be exploited remotely.’

In response to reports, TSA spokesman Ross Feinstein said that the agency has a rigorous certification and accreditation process for technology.

Feinstein added: "This process ensures information technology security risks are identified and mitigation plans put in place, as necessary.

"A majority of the equipment we utilise is not available for sale commercially or to any other entity."