Hackers Make Hay? Smart Tractors Vulnerable to Full Takeover

Researchers from Limes Security demonstrated that the FJDynamics AT2 aftermarket steering system is vulnerable to insecure over-the-air update and MQTT-based tracking: lack of TLS and signature validation allows attackers to install malicious APKs or firmware, gain root access, remotely steer or brick tractors, and use MQTT wildcards to monitor ~46,000 devices worldwide; the vendor disputes or has not demonstrably patched the issues, posing substantial safety and privacy risks to farmers.