WIRED - Not that you should necessarily believe Iran's claims about the U.S. drone it captured, but: it's possible to spoof a drone's GPS. It's harder than the Iranians make it seem. But it's doable, and if the Iranians did it, add that to the list of security flaws with the U.S. fleet of flying robots.
...The spoofing danger isn’t new. “On the military side,” says Humphreys, “they’ve known about this threat for 20-30 years.”
And this isn’t the first time Iran or its proxies have exploited a long-known vulnerability on an American drone. In 2008, the U.S. military discovered Iranian-backed insurgents in Iraq had managed to interceptunencrypted video feeds from drones using widely available commercial software. That flaw was known to the Air Force as far back as 1996.