Security researchers have discovered critical vulnerabilities in Yarbo robot lawn mowers that allow remote attackers to gain complete control of thousands of devices worldwide, override safety features (including emergency stop buttons), and extract sensitive owner data such as home addresses, email addresses, and Wi-Fi passwords. This incident reveals a broader IoT security crisis affecting connected physical devices with blades and autonomous capabilities, creating both physical safety risks and enterprise infrastructure threats (e.g., surveillance near critical facilities). For IT organizations, this underscores the urgent need to implement device authentication protocols, network segmentation, and IoT inventory management across all connected hardware.
A Yarbo lawnmower with a trimmer attachment. | Image: Yarbo I'm lying in the dirt. It's coming for me. Then, with a lurch, it's climbing up my chest. If Andreas Makris doesn't stop the 200-pound robot lawn mower in time, it could drag its blades across my body. Makris certainly can't reach over and hit the emergency stop button - he's nearly 6,000 miles away, having hacked this robot from the other side of the planet, to demonstrate the gaping security holes in Yarbo's robot lawn mowers. And I've made the questionable decision of lying down in the mower's path - to see just how far Makris, the security researcher who discovered those flaws, is able to push the mower. By the time the mower touches m … Read the full story at The Verge.
