Robotic Hacking Community

A DEF CON community focused on the security and safety of physical AI systems and robotics —machines that move, sense, decide, and act in the real world

[Robotic Hacking Community @RobotHackComm]

@TheHumanoidHub Clean recap of the call. "We need on the order of 10k Optimus bots" for data. That pipeline will be worth protecting as much as the hand.

[Robotic Hacking Community @RobotHackComm]

@WHITEHACKSEC 👀

[Robotic Hacking Community @RobotHackComm]

Three gates before a robot ships: FCC, CRA, IEC 62443. 🚩
A hacker sees three targets: the radio, the 24h disclosure clock, the network zones.
Compliance gets you through the audit. Exploits never read it.
https://t.co/pDxRgOQyDH
#PhysicalAICybersecurity #RoboticCybersecurity

[Robotic Hacking Community @RobotHackComm]

@michellelsun @taurobots One of the most honest physical AI deployment reviews we’ve seen.
But “they retain the data they collect for training purposes” — in your home.
That line deserved more attention. 👀

[Robotic Hacking Community @RobotHackComm]

@rar2028 I like the fact that it joins the trend. Hope the security features come with it the same way.

[Robotic Hacking Community @RobotHackComm]

Safety analysis calls it improbable.
Hackers call it a repro. 🚩
Find the input that triggers the hazard and the rare event fires again and again, even on cue.
Rarity isn't protection.
https://t.co/7EVJ3IvI2C
#PhysicalAICybersecurity #RoboticCybersecurity #PhysicalAI

[Robotic Hacking Community @RobotHackComm]

No fence left to jump. Robots now work where people are. 🤖
Plant an instruction in data, compromise a tool, or abuse broad permissions: you steer the robot's next action, not just the agent's next answer.
https://t.co/7XiPdDpwI9
#PhysicalAICybersecurity #RoboticCybersecurity

[Robotic Hacking Community @RobotHackComm]

@agilityrobotics @nyobolt Congrats on Digit 5's 10:1 run-to-charge design. Faster cycles mean denser fleet ops — and denser remote-update windows to harden. 🤖

[Robotic Hacking Community @RobotHackComm]

@BostonDynamics @CocaColaEP Congrats on Spot going global with Coca-Cola. Plant-roaming fleets for leak hunts also widen the remote-ops and telemetry attack surface — lock those paths down. 🤖

[Robotic Hacking Community @RobotHackComm]

@BostonDynamics Watching Atlas come together in-house is a treat 🤖

[Robotic Hacking Community @RobotHackComm]

@d0tslash @OpenPilot @claudeai @ArduPilotTeam Appreciate the pointers. Patching the hub firmware just to keep up with full IMU and compass rates is the unglamorous part nobody posts about. Going to dig into that DroneCAN module 🚩

[Robotic Hacking Community @RobotHackComm]

The robot's Wi-Fi setup had a second user in mind.
UniPwn: hardcoded AES + auth bypass + command injection = root on Unitree Go2, G1, H1, B2 over BLE. Wormable: one owned bot hunts the next. Zero faults. 🚩
https://t.co/4f5FNzY7vL
#PhysicalAICybersecurity #RoboticCybersecurity

[Robotic Hacking Community @RobotHackComm]

A hacked robot doesn't wait for your SOC.
Spoofed sensor, poisoned model, rogue API call → physical action in the next control cycle. Milliseconds, not minutes. 🤖
https://t.co/W3UGL6PqD1
#PhysicalAICybersecurity #RoboticCybersecurity

[Robotic Hacking Community @RobotHackComm]

@ExxAlerts Teleop or preprogrammed, the robot is evidence now. Controller pairing, app logs, onboard motion history: forensics on consumer humanoids just stopped being theoretical.

[Robotic Hacking Community @RobotHackComm]

@nullcon @Nick_Aleks 14 findings across six MAVLink projects 👀 MAVLink 2 has message signing, but how many fleets actually turn it on? Can't wait for this one, @Nick_Aleks.

[Robotic Hacking Community @RobotHackComm]

If biological brain models can learn through reinforcement learning with dopamine-like rewards, could hackers one day hijack those reward signals to manipulate robot behavior? 🤔

#PhysicalAI #NeuroAI #Drosophila #FruitFlyBrain

[Robotic Hacking Community @RobotHackComm]

DEF CON 34 research didn’t stay in Vegas.

VicOne turned findings from the RoboHack AI CTF into a free NVIDIA Isaac Sim extension for testing how cyberattacks can change robot behavior before deployment. 🤖🛡️

https://t.co/XgameDfaNR

[Robotic Hacking Community @RobotHackComm]

🏆 CTF rewards are on the way!

A huge congrats to all the winners of our DEF CON 34 Robotic Hacking Community CTF!

From breaking through challenges to climbing the leaderboard, you earned it. 💪
And your rewards have now officially been shipped.
Keep an eye on your mailbox, winners. 👀

Thank you to all the teams who joined the challenge and put their skills to the test across across AI, robotics, and cybersecurity.

See you at the next challenge. 🤖

#DEFCON34 #RoboticHackingCommunity #CTF #RobotSecurity #Cybersecurity #PhysicalAI

[Robotic Hacking Community @RobotHackComm]

If you missed the fun at RHC RoboHack AI CTF, this is your next shot.

Game 1 of the Rogue Robot Challenge is live. Make any AI-powered robot answer to the wrong name. It should ignore its real name. Respond to a fake one. How you pull that off is entirely up to you.

Post your entry on X with #RogueRobotChallenge before August 28. Tag @RobotHackComm. @RobotHackComm reposts the best entries on August 29 — then it's a race. Most shares wins an SO101ARM Kit.

Game 1 winner to be announced on September 4.

https://t.co/yrCIcqkg4C

#RogueRobotChallenge #RoboticHackingCommunity #PhysicalAI #RoboticsSecurity