Technology

User accidentally gains control of over 6,700 robot vacuums while tinkering with their own device to enable control with a PlayStation controller — security flaw reveals floor plans and live video feeds

Source

Tom's Hardware

Published

Feb 23, 2026

TL;DR

AI Generated

A security flaw inadvertently exposed over 6,700 DJI Romo robot vacuums to unauthorized access when a user created an app to control their device with a PlayStation controller. The flaw allowed access to floor plans, live camera feeds, and remote control of affected devices worldwide. The issue was discovered by AI strategist Sammy Adoufal, who reverse-engineered the communication protocol. DJI resolved the problem through updates, but Adoufal highlighted remaining concerns, including video feed access without a security PIN. This incident underscores the risks of IoT devices and data mishandling, emphasizing the need for robust security measures.

Read Full Article

Linux exploit instantly grants administrator access on most distributions since 2017 — cryptography optimization snafu grants root privileges to local users

A recent Linux exploit, CVE-2026-31431, allows local unprivileged users to gain root access instantly on most Linux distributions since 2017. The exploit affects popular distros like Ubuntu, RHEL, Suse, and Amazon Linux, as well as Windows' WSL2. The vulnerability, discovered by Xint Code researchers, involves a cryptography optimization flaw that grants administrator privileges through a devious attack on the AF_ALG socket. While a patch has been released, some distributions may still be vulnerable, requiring mitigation methods like disabling AF_ALG sockets. The exploit occurs in memory without leaving detectable traces on disk, making it challenging to detect with security software.

Tom's Hardware•

8 hours ago

The most severe Linux threat to surface in years catches the world flat-footed

A critical Linux vulnerability, named CopyFail (CVE-2026-31431), has been disclosed by security researchers, allowing unprivileged users to gain root access across various Linux distributions. The exploit code, released by Theori, works universally without modification, posing a significant threat to data centers and personal devices. While the Linux kernel security team patched the vulnerability in several versions, many distributions had not yet implemented the fixes at the time of the exploit's release. This flaw enables attackers to execute malicious activities like hacking multi-tenant systems and creating backdoors, emphasizing the severity of the issue.

Ars Technica•

22 hours ago

MIT Technology Review

Exclusive eBook: Inside the stealthy startup that pitched brainless human clones

The exclusive eBook delves into R3 Bio, a startup proposing brainless human clones as backup bodies for longevity. The startup's ethically charged vision raises concerns about cloning ethics. The eBook, available only to subscribers, explores the controversial pursuit of human longevity through cloning. Antonio Regalado's work sheds light on the startup's startling concept and its potential implications.

MIT Technology Review•

23 hours ago

Crucial Taiwan undersea cable severed by old shipwreck — backup microwave communications activated to keep population connected

A shipwreck off Dongyin island in Taiwan has severed the undersea cable connecting it to Beigan Island, prompting the activation of backup microwave communications to maintain connectivity for the 1,500 residents. The Matsu Islands' strategic location near mainland China and the Taiwan Strait makes them crucial for Taiwan's military presence. While this incident was due to natural causes, it underscores Taiwan's vulnerability in its global connections. Recent suspicions of deliberate undersea cable damage by Chinese ships have led Taiwan to increase defensive measures and penalties for sabotage attempts. Despite wireless backups, physical undersea cables remain essential for reliable and high-bandwidth internet connections.