Tag: security flaws

Drones are complex devices and need to have their firmware updated often. Sometimes this adds more features. On other occasions, it’s desperately needed to plug security flaws.

Read on to see how a flaw can bring down your DJI drone and expose your location.

Hackers targeting DJI drones

DJI is undoubtedly one of the most popular drone manufacturers, with people globally taking to the skies with a Mavic, Phantom or Air. With powerful cameras and sophisticated mechanics, many drones are high-powered gadgets used for commercial photography.

As with any device that uses complex components, the software that drives them is vital. Unfortunately, 16 severe vulnerabilities have been discovered in DJI drone models that hackers can use mid-flight to take control and force them to crash. Not only that, but the flaws can also give away your physical location.

Security researchers at Ruhr University Bochum in Germany found that the DJI Mini 2, DJI Air 2 and DJI Mavic 2 drones are susceptible to “fuzzing.” That’s when someone floods the drone with random commands to exploit a vulnerability. 

This can cause the gadget to crash or lets them take complete control from the pilot. “Based on reverse engineering of DJI firmware, we designed and implemented a decoder for DJI’s proprietary tracking protocol DroneID, using only cheap COTS hardware,” researchers explain.

Through these methods, the team demonstrated that the transmitted data is not encrypted but accessible to anyone, compromising the drone operator’s privacy. Most of the vulnerabilities can be exploited through a mobile phone.

Update your drone ASAP

Like your computer or smartphone, you must ensure your drone’s software is updated to the latest version. DJI was made aware of the security flaws before researchers released their data and rolled out a patch to prevent abuse.

If you own a DJI drone, you should update its firmware immediately. This is done through the DJI Fly app or using DJI Assistant 2. If you are using the app, you’ll see an update alert when your phone connects to the drone.

The other method to update your drone is to connect it to your computer and run the DJI Assistant 2 software. Once connected, click Update in the top right-hand corner of the firmware history page, and it should begin the download.

Continue reading →

Your router is arguably the most critical component in your internet network. It serves as the primary point where all wireless devices connect and download information. A vulnerability in the router’s software could spell disaster. Tap or click here if you are sick of slow Wi-Fi speeds.

Continue reading →

As a parent, the security of your children is of utmost importance. If you have teenagers, you might have been tempted to install software on their mobile phones so that you can keep track of them. There are several legitimate apps available for both iOS and Android.

Continue reading →

Microsoft Office has become a major target for cybercriminals in recent months. You need a Microsoft Account to log in to Office, and stolen accounts can be used by hackers to lock you out of your PC or access your email and cloud storage.

Continue reading →

This month’s Patch Tuesday is here at last, and even more security flaws are being fixed this time around. For July, 123 vulnerabilities are being addressed, and 18 of them have been dubbed urgently critical to repair.

Continue reading →

Software exploits are nothing new, but they can’t be ignored for too long. One critical exploit is enough for hackers to change your settings or sneak malware into your system without you knowing.

In fact, security flaws on the operating system level have led to devastating consequences for Windows users. Hackers even exploited corrupted font files to install malware in the past. Tap or click here to see how they did it.

Continue reading →