SirenJack bug puts emergency alert sirens at risk for hacks

Researchers at Bastille disclosed a vulnerability dubbed "SirenJack" in ATI Systems' emergency siren installations: an unencrypted radio protocol permits attackers to remotely trigger sirens and use a live public-address mode to broadcast false messages. Confirmed at sites in San Francisco and Sedgwick County, ATI is developing firmware/software updates to add encryption and mitigate the risk; while no active exploitation of this specific bug is reported, the flaw could enable coordinated false alarms against critical infrastructure.