If you own a DJI robit vacuum (RoboVac), turn it off immediately, and keep it off until DJI releases a security fix.
The entire DJI RonoVac fleet can be remotely accessed and controlled by hackers.
❗️🎮 A hobbyist accidentally hacked EVERY DJI RoboVac by extracting his own private token, gaining the ability to remotely control the entire DJI fleet and view all their video streams.
All he wanted was to control his new DJI RoboVac with a PS5 gamepad.
He skipped responsible disclosure and published the vulnerability before it was patched, stating:
"I don't follow the rules (...) for money. I f***ing don't care, I just want this fixed."