392 matches found
Researchers Reveal New Security Flaw Affecting China's DJI Drones
Cybersecurity researchers on Thursday revealed security issues in the Android app developed by Chinese drone-maker Da Jiang Innovations DJI that comes with an auto-update mechanism that bypasses Google Play Store and could be used to install malicious applications and transmit sensitive personal...
DroneSploit - Drone Pentesting Framework Console
This CLI framework is based on sploitkit and is an attempt to gather hacking techniques and exploits especially focused on drone hacking. For the ease of use, the interface has a layout that looks like Metasploit. Black Hat Europe Arsenal 2019 presentation Also see articles: Black Hat Europe: New...
Locating malicious drone operators through deep neural networks
By Zara Khan Researchers at Ben Gurion University have developed a technique... This is a post from HackRead.com Read the original post: Locating malicious drone operators through deep neural networks...
Micro Air Vehicle Link Access Control Error Vulnerability
Micro Air Vehicle Link MAVLink is a lightweight messaging protocol from the Dronecode project that is primarily used for communication between ground control terminals ground stations and UAVs as well as between airborne UAV components. An access control error vulnerability exists in MAVLink, whi...
Parrot ANAFI has an unspecified vulnerability
The Parrot ANAFI is a drone device. A security vulnerability exists in the Parrot ANAFI using firmware versions prior to 1.5.0, which can be exploited by an attacker with the help of the 'garsdkcmddescCommonCommonCurrentDateTime' command with a long date length to cause a web server crash...
Unspecified vulnerability in Parrot ANAFI (CNVD-2021-27990)
The Parrot ANAFI is a drone device. A security vulnerability exists in the Parrot ANAFI that can be exploited by a remote attacker to disconnect the drone from its controller during flight...
CVE-2019-3944: Incorrect Default Permissions
Parrot ANAFI is vulnerable to Wi-Fi deauthentication attack, allowing remote and unauthenticated attackers to disconnect drone from controller during mid-flight...
U.S. Department of Interior Grounding All Drones
The Department of Interior is grounding all non-emergency drones due to security concerns: The order comes amid a spate of warnings and bans at multiple government agencies, including the Department of Defense, about possible vulnerabilities in Chinese-made drone systems that could be allowing...
Friday Squid Blogging: Streamlined Quick Unfolding Investigation Drone
Yet another squid acronym. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...
Friday Squid Blogging: Squid-Like Underwater Drone
The Sea Hunting Autonomous Reconnaissance Drone SHARD swims like a squid and can explode on command. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...
A week in security (September 9 – 15)
Last week on the Labs blog, we looked at free VPN offerings, how malware can hinder vital emergency services, and explored how the Heartbleed vulnerability is still causing problems. We also talked about a large FTC settlement involving Google, and how to keep an eye out for leaky AWS buckets...
Watch a Drone Take Over a Nearby Smart TV
Smart TVs continue to look dumber by the day...
The Marines’ New Drone-Killer Aces Its First Test in Iran
Last week’s US strike of an Iranian drone is the first reported successful use of the Marines’ new energy weapon...
Iran Shoots Down a US Drone, Apple Recalls MacBook Batteries, and More News
Catch up on the most important news from today in two minutes or less...
The Global Hawk Drone Iran Shot Down Was a $220M Surveillance Monster
The Global Hawk can fly at an altitude of 55,000 feet and stay aloft for 30 hours straight...
Drone Denial-of-Service Attack against Gatwick Airport
Someone is flying a drone over Gatwick Airport in order to disrupt service: Chris Woodroofe, Gatwick's chief operating officer, said on Thursday afternoon there had been another drone sighting which meant it was impossible to say when the airport would reopen. He told BBC News: "There are 110,000...
drone-films.com XSS vulnerability
Open Bug Bounty ID: OBB-704316 Description| Value ---|--- Affected Website:| drone-films.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
Threatpost News Wrap Podcast for Nov. 9
Midterm elections aside, it has been a busy week in the infosec world. On Monday, the Pentagon suddenly started uploading malware samples from APTs and other nation-state sources to the website VirusTotal. On Wednesday, Cisco in an advisory revealed that it had “inadvertently” shipped an in-house...
Here's How Hackers Could Have Spied On Your DJI Drone Account
Cybersecurity researchers at Check Point today revealed details of a potential dangerous vulnerability in DJI Drone web app that could have allowed attackers access user accounts and synced sensitive information within it, including flight records, location, live video camera feed, and photos tak...