Areport by the US Department of Homeland Security has found that the Blackberry mobiles of the Transportation Security Administration’s (TSA) are vulnerable to cybersecurity threats due to a backlog of security patches and configurations.

It said hackers could exploit unsecured wireless networks to monitor data transmissions, execute denial of service attacks, alter messages, or even impersonate legitimate users to steal sensitive data provided by airline passengers. Investigators found that TSA had secured itself against most vulnerabilities using physical and logical security access controls, but according to the report, agents “identified high-risk vulnerabilities involving patch and configuration controls.”