Rapid7 layoffs, Boeing 737 hacking, refrigeration vulnerabilities in weekly roundup

Rapid7 is cutting 314 jobs, 12% of its workforce, as new CEO Wael Mohamed restructures the company around efficiency and its core platform. The move is expected to cost up to $11 million in severance and benefits, with resources redirected toward product modernisation and AI-driven capabilities.

Academic researchers demonstrated how a coin-sized hardware device attached to an external port on a Boeing 737 can compromise its systems. While safety systems likely prevent direct harm, an attacker could spoof data such as air temperature and aircraft weight, and even change the flight plan.

Claroty’s Team82 found 23 vulnerabilities in Copeland XWEB Pro refrigeration controllers, including ones that can be chained to achieve root-level remote code execution. A demonstration showed a compromised controller could manipulate cooling fans and compressors while concealing temperature increases. Multiple vulnerabilities, including RCE flaws, were also found in Danfoss AK-SM 800A controllers. Both vendors have patched the issues.