AI News Feed
Market watch
Resident Evil 4 on Switch 2 is a good but imperfect port, TechRadar review saysWhatsApp Moves Toward Opening All Chat Links in an In-App BrowserApple Sets Oct. 28 'Pro and tell' Event as China Smartphone Market Hits 14-Year LowSeoul shares slide as AI concerns spur tech profit-takingAmazon launches TorchNeuron toolkit for PyTorch on AWS Trainium chipsGemini 4 Argon extends magnetic-field solutions tied to 59-year-old fusion conjecture
Resident Evil 4 on Switch 2 is a good but imperfect port, TechRadar review saysWhatsApp Moves Toward Opening All Chat Links in an In-App BrowserApple Sets Oct. 28 'Pro and tell' Event as China Smartphone Market Hits 14-Year LowSeoul shares slide as AI concerns spur tech profit-takingAmazon launches TorchNeuron toolkit for PyTorch on AWS Trainium chipsGemini 4 Argon extends magnetic-field solutions tied to 59-year-old fusion conjecture
Cybersecurity

Robot Vacuum Privacy Risks Go Beyond Floor Maps, Engadget Reports

Robot vacuums can collect maps, audio and video, and a DJI flaw let one user access thousands of devices, Engadget reports.

AI News Feed · 2026-10-20 09:21

Engadget reported that Sammy Azdoufal was trying to remotely control his DJI Romo vacuum when he accidentally became able to control and access about 7,000 robot vacuum cleaners across the world instead of only his own. DJI said it resolved the backend permission issue by issuing two updates on Feb. 10, 2026, according to the report. The server recognized a legitimate customer but failed to restrict that customer to their own device. Azdoufal used Claude Code to help reverse-engineer the communications, Engadget reported, but the underlying security weakness was in the security checks, not in AI, and a complex password would not fix it.

Beyond security breaches, the report said everyday use can generate data. A connected robot vacuum may send cleaning activity, device status, floor maps and detected objects to its manufacturer. iRobot's privacy policy says connected models may send room names, floor types, detected objects, the robot's movements and Wi-Fi network details, in addition to floor maps, according to Engadget. Some top models include microphones and remote video viewing, and cloud connectivity may route data through manufacturer servers.

The report said there is no clear and established winner on privacy. It recommended reading the privacy policy before purchase and looking for on-device navigation and image processing. Mandatory cloud features should be a deal-breaker, and buyers should check how diagnostic data is shared. A camera-free model can avoid that degree of exposure, but no camera does not mean no data collection, according to the report.

Engadget cited Matic as a local-first option. Its privacy policy says maps are streamed to the app over home Wi-Fi and processing takes place on the robot, according to the report. Remote app use can transmit data through an encrypted cloud connection only with explicit consent, and only authorized support can involve sharing audio or video. The report also said a manufacturer's privacy policy describes commitments but does not prove a product is free of security flaws; even if a company does not plan to share data, an attacker might still access it.

For people already using a robot vacuum, the report recommended setting a strong password, enabling two-factor authentication and keeping firmware up to date. It said users should disable remote viewing or other connected features they do not need.