Skip to main content

Hackers may attack home networks through Philips Hue smart bulbs vulnerability

Security researchers discovered a vulnerability in the Philips Hue smart bulbs that may allow hackers to infiltrate a home’s network.

Cybersecurity firm Check Point revealed the exploit through a blog post, where it detailed the method of attack that hackers may use to take advantage of the bug.

The first step in the hack, which is made possible by a remote exploit in the ZigBee low-power wireless protocol that is used on many smart home devices, is for the hacker to take control of one Philips Hue smart bulbs. By adjusting the bulb’s color and brightness, the victim will be tricked into thinking that it is glitching out.

The smart bulb will appear as “unreachable” in the Philips Hue control app, so the victim will likely try to reset it by deleting the bulb and then reconnecting it to the app. Once the infected bulb is back online, the hacker will flood its control bridge with malware through the ZigBee exploit, then infiltrate the home network where the bridge is attached to spread ransomware and spyware, among other things.

The hack requires the victim to take action on a malfunctioning Philips Hue smart bulb, which has a good chance of happening due to the visibility of a flickering light bulb. The researchers already reached out to Signify, the parent company of Philips Hue, in November 2019 to provide information about the vulnerability, which has already been patched up in firmware version 1935144040.

Philips Hue smart bulb owners are recommended to check the software update section of the Philips Hue control app to make sure that the latest version of the software has been installed. It should not be an issue if automatic updates are enabled, otherwise, owners will need to manually download the new firmware version.

Check Point, in a joint decision with Signify, further delayed the release of the full technical details of the vulnerability. This delay is intended to give people sufficient time to update their Philips Hue smart bulbs, in order to protect themselves from hackers trying out the attack especially after its full details are eventually released by Check Point.

Editors' Recommendations

Aaron Mamiit
Aaron received a NES and a copy of Super Mario Bros. for Christmas when he was 4 years old, and he has been fascinated with…
How smart lighting affects your health
Govee Glide wall light installed above couch on wall.

The advent of smart lighting has provided a wealth of new opportunities for tweaking personal health. The right color temperatures and timing can optimize focus during the day and ease sleep schedules at night. Let's dig into the many health factors that smart lighting touches upon.

Note: None of us here at Digital Trends are remotely close to being optometrists or medical doctors. Take the advice of licensed professionals before making big health choices. 
How does lighting affect sleep?

Read more
Philips Hue expands smart lighting to the great outdoors
The Philips Hue Inara brings smart lighting to the outdoors.

Philips Hue is a brand most people familiar with the smart lighting scene know and love. It has created a variety of smart lighting options to display in and around the home. Now, the company is expanding its outdoor collection with three new lights: The Inara, the Lucca, and the Resonate.

The Resonate is a black, minimal, rectangular wall light that casts light up and down your home siding. The light beams from the light are shaped in a unique and eye-catching triangular design. The Resonate will be able to display both color and white lights.

Read more
Abode expands line of smart home devices with doorbell, light bulbs at CES 2022
The Adobe Wireless Video Doorbell beside its speaker.

Abode has announced two new additions to its existing lineup of smart home products at CES 2022. The Abode Wireless Video Doorbell beams live 2K footage to your phone, or to the cloud with a subscription plan. It boasts full-color night vision, wire-free installation, and two-way audio.

As you would hope, the doorbell is certified to weather the outdoors with an IP65 waterproof rating. It comes with a companion Chime device to act as the bell indoors. On the software side, the Abode Wireless Video Doorbell is able to differentiate people from other kinds of movement, which can help you triage notifications appropriately. This capability is expected to expand to pets and packages in the future.

Read more