{"slug": "hacking-legged-robots-with-spikes-and-stones-vlm-backdoors-and-implanted", "title": "Hacking legged robots with spikes and stones: VLM backdoors and implanted components. 🤖🦾👠၊၊||၊😈", "summary": "Security researchers at Michigan Technological University demonstrated two new classes of backdoor attacks against AI-powered legged robots, both targeting the vision-language model (VLM) that drives their decision-making. One attack implants a malicious hardware component during manufacturing or maintenance that injects adversarial prompts into the VLM once a specific sequence of prior movements is detected; the other embeds a backdoor during model training that is triggered by pressure patterns from stones or spikes under the robot's feet, unleashing a pre-programmed destructive behavior. The work is detailed in two papers, StepTrigger and Silent Sabotage.", "body_md": "A group of academic security researchers from Michigan Technological University (USA) demonstrate a new generation of cyberattacks against AI-powered legged robots in their recent works.\n\nWhat is a legged robot? Any robot that has legs! :) The main target of both attacks is the decision-making AI inside the robot.\n\n**Attack 1:** Robot injected with a malicious component during manufacturing or maintenance.\n\nTrigger: A specific sequence of the robots previous movements.\n\nAction: Start injecting malicious prompts into the VLM decision engine to affect the robots operations.\n\n**Attack 2:** A VLM backdoor can be embedded during the model training stage.\n\nTrigger: Pressure patterns - small stones or spikes in the robots path that trigger its sensors in the right sequence.\n\nAction: Start an embedded program of destruction or malicious activity.\n\nVery interesting approach and cool results. Make sure your robot doesn’t step on stones! :)\n\nMore details:\n\nStepTrigger: Contact-State-Triggered Backdoor Attacks on VLM-Powered Legged Robots [PDF]: [https://arxiv.org/abs/2609.26131](https://arxiv.org/abs/2609.26131)\n\nSilent Sabotage: Internal State Triggered Backdoor Attacks on LLM-Powered Robotic Systems [PDF]: [https://arxiv.org/abs/2609.26184](https://arxiv.org/abs/2609.26184)", "url": "https://wpnews.pro/news/hacking-legged-robots-with-spikes-and-stones-vlm-backdoors-and-implanted", "canonical_source": "https://it4sec.substack.com/p/hacking-legged-robots-with-spikes", "published_at": "2026-10-12 16:55:17+00:00", "updated_at": "2026-10-12 19:47:56.035733+00:00", "lang": "en", "topics": ["robotics", "ai-safety", "large-language-models", "computer-vision", "ai-agents"], "entities": ["Michigan Technological University", "StepTrigger", "Silent Sabotage"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/hacking-legged-robots-with-spikes-and-stones-vlm-backdoors-and-implanted", "markdown": "https://wpnews.pro/news/hacking-legged-robots-with-spikes-and-stones-vlm-backdoors-and-implanted.md", "text": "https://wpnews.pro/news/hacking-legged-robots-with-spikes-and-stones-vlm-backdoors-and-implanted.txt", "jsonld": "https://wpnews.pro/news/hacking-legged-robots-with-spikes-and-stones-vlm-backdoors-and-implanted.jsonld"}}