Researchers Demonstrate Flock Safety Camera Hijack via Default Password

Security researchers Jon Gaines and Benn Jordan demonstrated that a physical button sequence on Flock Safety cameras activates a diagnostic Wi-Fi hotspot, often protected by the default password “security.” This allows root access via Android Debug Bridge in under 30 seconds, enabling footage extraction, malware installation, and credential theft. Additionally, over 60 Flock cameras were found streaming live footage with no authentication, exposing 30 days of archived video. Flock operates over 100,000 license plate readers across the U.S.