Lily Hay Newman reports:
DJI makes some of the most popular quadcopters on the market, but its products have repeatedly drawn scrutiny from the United States government over privacy and security concerns. Most recently, the Department of Defense in May banned the purchase of consumer drones made by a handful of vendors, including DJI.
Now DJI has patched a problematic vulnerability in its cloud infrastructure that could have allowed an attacker to take over users’ accounts and access private data like photos and videos taken during drone flights, a user’s personal account information, and flight logs that include location data. A hacker could have even potentially accessed real-time drone location and a live camera feed during a flight.
Read more on Wired.