Check Point: serious security problem in Chinese nulti-rotor drones of DJI

Israeli security company Check Point revealed a serious security problem in the rackets of the Chinese DJI company. DJI is considered to be the leader and largest in the global civilian-consumer market, with a market share of 70%. Check Point's investigators, Dikla Barda and Roman Zaken, said the problem allowed hackers to break into the personal accounts of the spiders' operators, and in some cases to obtain real-time access to the information and even receive live video and voice broadcasts.
The company said private users, as well as companies and organizations that synchronize the information about the skaters with the DJI cloud servers, were fully exposed to the security problem and the account and information could be controlled remotely. The company makes it clear that they updated DJI about the weakness and that it has already been corrected. DJI announced that it had no information that hackers abused this weakness. The breach is particularly serious since the scavenger industry is not only used by private consumers but by many organizations for very sensitive needs such as vital infrastructure, security, policing and law enforcement, communications infrastructure, industry, agriculture, construction and entertainment.
This is not the first time that DJI's name has been associated with information security issues. Last year, the US military, which used DJI's curses, issued a directive to stop using these products because of "fear of cyber security holes." The move was accompanied by the constant fear that the information collected by the DJI could be passed on to the Chinese government - similar to occasional claims made to Chinese technology companies. The DJI claimed that a number of actions had been taken to improve security.
Oded Vanunu, head of product weaknesses at Check Point, who led the study, said: "DJI's tremendous popularity demonstrates how important it is that potential security weaknesses such as ours have been handled as quickly as possible. Sensitive users between different platforms must remember that the exposure of one platform endangers all of their infrastructures, and that the protection required by reality is one that deals with the entire infrastructure, not just one of them. "
 Mario Ravello, Vice President and Regional Director, North America, DJI: "We appreciate the expertise of Check Point's researchers and the responsibility they demonstrated in presenting the full and sensitive information about this significant weakness, which is why DJI has created the debugging program. Keeping our users and their information up to date is a top priority, and we are committed to continue collaborating with responsible security researchers such as Check Point. "
Check Point Software Technologies is the world leader in providing cyber attack protection solutions to governments, organizations and companies all over the world. The company's solutions protect more than 100,000 customers worldwide from all fifth-generation cyber attacks including malware, ransom and more. Check Point offers a security architecture for its clients' networks, cloud and mobile, as well as the most comprehensive security control system available to manage the organization's information security system.