Security Problems Found in Yarbo Robot Lawn Mowers: What Owners Should Know

Federal cybersecurity officials have issued a warning about the Yarbo robotic lawn mower system. The security problems affect both the mobile app (on Android and iPhone) and the cloud system that connects to the robots. Attackers could potentially obtain hard-coded credentials (permanent passwords built into the system), access data about how your robot operates, and possibly send commands to control Yarbo robots.

If you own a Yarbo robot lawn mower, your device could be vulnerable to unauthorized access. Someone with technical knowledge could potentially see information about when and where your robot operates, which reveals patterns about when you are home or away. In a worst case scenario, they might be able to send commands to your robot, though the alert does not specify exactly what commands would be possible. All versions of the Yarbo Android and iOS apps are affected, along with the entire cloud infrastructure. Yarbo owners should take these steps right away:

1. Check the Yarbo website and your app for any available security updates and install them immediately.
2. Change your Yarbo account password to something strong and unique that you do not use anywhere else.
3. Review your home WiFi security to make sure you are using WPA3 or at least WPA2 encryption with a strong password.
4. Disable remote access features if you do not actively use them.
5. Contact Yarbo customer support directly to ask what they are doing to fix these vulnerabilities and when a security patch will be available. Smart home devices and Internet of Things products are convenient but often have security weaknesses. Before buying any connected device for your home, research whether the company has a good track record of issuing security updates. Keep all smart home devices on a separate WiFi network from your computers and phones if your router allows it. Regularly check for and install updates. Remember that every internet connected device in your home is a potential entry point, so weigh the convenience against the privacy and security risks.