Amazon Releases Patches for Blink Security Camera Vulnerabilities

Amazon released patches for Blink security camera vulnerabilities, said cybersecurity company Tenable Tuesday, after it discovered seven severe vulnerabilities in the Blink XT2. Amazon urged users to confirm their device is updated to firmware version 2.13.11 or later, Tenable said. If exploited, the vulnerabilities could give attackers full control of an affected device, allowing them to remotely view camera footage, listen to audio output and hijack the device for use in a botnet, Tenable said. Attackers could perform distributed denial of service attacks, steal data or send spam, it said, including obtaining sensitive account information, viewing stored photographs and videos, adding or removing devices from the account or blocking camera communications. Amazon emailed: “Customer trust is important to us and we take the security of our devices seriously. Customers have received automatic security updates addressing these issues for impacted devices.”