Flaw in DJI website gave hackers access to user accounts and live feeds from quadcopters

A worrying vulnerability in DJI drones gave hackers complete access to a user's account without them realizing it. Security researchers from Check Point in March discovered a flaw in DJI's cloud infrastructure that allowed attackers to take over users' accounts and access private data like drone logs with location data, maps, account information and photos or videos taken during flight. However, DJI said it patched the vulnerability in September. A worrying vulnerability in DJI drones gave hackers complete access to a user's account. Users fell prey to the attack by clicking on a malicious link shared through DJI Forum, an online forum the firm runs for user discussions about its products.