Security News

PhD student guilty of 3D-printing 'kamikaze' drone for Islamic State terrorists
2023-09-29 19:31

A PhD student has been found guilty of building a potentially deadly drone for Islamic State terrorists, in part using his home 3D printer. The prosecution said he had designed the single-use, video-transmitting "Kamikaze" drone "Somewhat inspired by the design of the Tomahawk missile," and used a 3D printer to build the wings.

DARPA takes its long-duration Manta undersea drone for a test-dip
2023-09-28 18:36

DARPA's extended-duration unmanned undersea vehicle is having its first aquatic excursion to test if this naval drone has wings, er, fins. The splash test was part of DARPA's Manta Ray program for America's next-generation of undersea power projection, with PacMar Technologies and Northrop Grumman each building their own prototype UUVs.

Ukrainian Military Targeted in Phishing Campaign Leveraging Drone Manuals
2023-09-25 13:05

Ukrainian military entities are the target of a phishing campaign that leverages drone manuals as lures to deliver a Go-based open-source post-exploitation toolkit called Merlin. "Since drones or...

Drone Usage Policy
2023-08-14 16:00

Unmanned aircraft systems, more commonly known as drones, have quite literally taken off by performing many new and inventive commercial applications. Delivering packages, recording terrain, reporting news, documenting wildlife and even providing internet access are just a few of the functions drones can offer.

China bans export of drones some countries have already banned anyway
2023-08-01 06:00

China introduced restrictions on Monday that mean would-be exporters will require a license to ship certain drones and related equipment out of the Middle Kingdom. A spokesperson clarified that all civilian drones that are not included in the control are banned from export for military purposes, according to the Ministry of Commerce website.

Alert: New Electromagnetic Attacks on Drones Could Let Attackers Take Control
2023-06-28 15:05

Drones that don't have any known security weaknesses could be the target of electromagnetic fault injection attacks, potentially enabling a threat actor to achieve arbitrary code execution and compromise their functionality and safety. Side-channel attacks typically work by indirectly gathering information about a target system by exploiting unintended information leakages arising from variations in power consumption, electromagnetic emanations, and the time it takes to perform different mathematical operations.

Drone goggles maker claims firmware sabotaged to ‘brick’ devices
2023-05-03 19:40

Orqa, a maker of First Person View drone racing goggles, claims that a contractor introduced code into its devices' firmware that acted as a time bomb designed to brick them. On early Saturday, Orqa started receiving reports from customers surprised to see their FPV.One V1 goggles enter bootloader mode and become unusable.

Drone goggles maker claims ‘ransomware’ attack after firmware sabotage
2023-05-03 19:40

Orqa, a maker of First Person View drone racing goggles, claims that a contractor introduced code into its devices' firmware that acted as a time bomb designed to brick them. On early Saturday, Orqa started receiving reports from customers surprised to see their FPV.One V1 goggles enter bootloader mode and become unusable.

Vulnerability in DJI drones may reveal pilot’s location
2023-03-07 05:00

Serious security vulnerabilities have been identified in multiple DJI drones. These weaknesses had the potential to allow users to modify crucial drone identification details such as its serial number and even bypass security mechanisms that enable authorities to track both the drone and its pilot.

Friday Squid Blogging: We’re Almost at Flying Squid Drones
2023-03-03 22:23

Researchers are prototyping multi-segment shapeshifter drones, which are "The precursors to flying squid-bots." As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered.