: The systems utilize dual-energy detection to provide automatic color coding of materials, helping operators distinguish between organic (orange), mixed (green), and inorganic (blue) substances.
In 2019, a security researcher presented findings at DEF CON showing that several airport screening units (including some Rapiscan models) still responded to default credentials. An adversary with physical access to a checkpoint’s network port could:
However, hundreds (if not thousands) of legacy units remain in service. Airports and government agencies often run equipment for 10–15 years due to the high cost of replacement. A Rapiscan 518 X-ray unit installed in 2007 is likely still running its original firmware – and its original default password.