A security researcher discovered a vulnerability in Flock’s website that gave him an access token without needing login credentials. The researcher used the information gleaned to build a map of Flock cameras and share it on a website he named the Flock Surveillance Map, which now lists the location of 335,701 cameras. Flock has now issued a trademark infringement complaint with the goal of having the researcher close the website.
According to The Intercept, Joshua Michael used this to query ArcGIS, a third-party mapping and geospatial layer that Flock uses, to retrieve a database of Flock devices in November 2025.
Latest Videos FromTom’s Hardware
