As humanoid robots enter the mainstream, security pros flag the risk of botnets on legs
(2025/12/09)
- Reference: 1765292410
- News link: https://www.theregister.co.uk/2025/12/09/humanoid_robot_security/
- Source link:
Interview Imagine botnets in physical form and you've got a pretty good idea of what could go wrong with the influx of AI-infused humanoid robots expected to integrate into society over the next few decades.
[1]Morgan Stanley recently predicted robot revenue could surpass $5 trillion by 2050, and firms including Unitree Robotics, Agility Robotics, and [2]Engineered Art , along with major carmakers including [3]BMW , [4]Toyota , [5]Tesla , and [6]Hyundai (which also owns Boston Dynamics), are all developing humanoid robots.
These bipedal machines and their four-legged friends are slated for use [7]on the battlefield and in [8]law enforcement operations , in labs and academia, plus warehouses and [9]manufacturing facilities . As such, building security into these robots "is imperative," Joseph Rooke, risk insights director at Recorded Future's Insikt Group, told The Register .
[10]
With 3 billion of these robots in use by 2060, according to BofA Global Research's forecast, the worst-case scenario from a security perspective would be "an I, Robot situation with no coming back," Rooke said in an interview. "Botnets in a physical form is now."
[11]
[12]
In a report published Tuesday, Rooke outlines the potential fallout of not taking these precautionary measures immediately, and predicts a whole new industry dedicated to securing these robots will likely emerge in the next decade.
This isn't just the stuff of Hollywood or sky-is-falling security vendors either.
[13]
Researchers in late September published technical details about a working proof-of-concept hack that exploited [14]multiple security flaws – hardcoded cryptographic keys, trivial authentication bypass, and unsanitized command injection – in Unitree Robotics' Bluetooth Low Energy (BLE) Wi-Fi configuration interface used by the Chinese company's humanoid robots.
"What makes this particularly concerning is that it's completely wormable – infected robots can automatically compromise other robots in BLE range," wrote Víctor Mayoral-Vilches, Andreas Makris, and Kevin Finisterre. "This vulnerability allows the attacker to completely take over the device."
Three factors combine to form the "perfect storm" for these embodied AI systems, according to Rooke.
[15]
"First: we already use robotics, we've been using robotics in factories for a long time, and now we're developing walking ones," he said.
You've got robotics, you've got AI, and now you've got the need. It's the perfect storm for this to just skyrocket
"The second thing is, we've got the means for these embodied things to learn, so their sensors and their hearing devices can now learn the same way that you train an AI in a server box where it's contained."
The third factor has to do with the global population decline combined with an aging population, which is expected to lead to labor shortages and many countries turning to technology in general – robots in particular – to boost productivity.
"You've got robotics, you've got AI, and now you've got the need," Rooke said. "It's the perfect storm for this to just skyrocket."
Like with any internet-connected devices, robots are vulnerable to cyberattacks in the form of hijacking, data leaks, and long-term espionage and IP theft, putting not only the users of these machines at risk but also the companies (and their suppliers) that make humanoid robots.
While Recorded Future hasn't publicly reported any robotics firm breaches, its threat hunters have been tracking [16]RedNovember (Microsoft calls this crew [17]Storm-2077 ) and other Chinese government-sponsored spy groups that target defense, electronics, and manufacturing companies.
"I don't have specific evidence of them going after robotics, although absolutely it's their MO," Rooke said. "If your sector is listed in China's 15th five-year plan, you're basically being given a heads-up."
The most recent five-year plan puts a big emphasis on [18]AI and smart robots and their role in economic growth.
However, as Russia (with [19]limited success thus far) and other nations put more resources into humanoid robot R&D, "espionage makes sense in terms of the dangers that the actual robots themselves face," according to Rooke.
[20]Inventor who encouraged Elon Musk to make Optimus says most humanoid robots today are 'terrifying'
[21]Foxconn hires humanoid robots to make servers at Nvidia's Texas factory
[22]Amazon tested warehouse robots and found they're not ready to replace humans
[23]How to train your robot: Wear a tiny one in a baby carrier
Along similar lines, if your company supplies critical components to a firm developing advanced robots, consider your firm at risk of being targeted in a larger supply chain, he added.
There's also potential security risks for consumers as [24]home-helper humanoid robots like [25]Neo hit the market, and to that end Rooke says it's likely to be the consumer's responsibility to update the robots' software, similar to what happens after someone buys a laptop. "It's my job to update my Mac, or I am liable for problems if I get hacked because I haven't updated it," he explained. "The same thing could happen with some of these robots."
Additionally, he expects to see a new crop of companies specifically designed to secure humanoid robots emerge – so put that on your RSAC bingo card for 2030 and beyond. These machines are essentially IoT devices, Rooke said.
But they've also got embedded AI systems. And unlike other big, heavy IoT machines – like a connected refrigerator that tells you when you're running low on milk – these robots walk on two feet, and come equipped with "eyes" and "ears" that presumably could be co-opted for all manner of nefarious purposes.
Rooke says it's pretty speculative at this point what humanoid robot security startups will look like, but he has one guess: "IoT on steroids." ®
Get our [26]Tech Resources
[1] https://www.morganstanley.com/insights/articles/humanoid-robot-market-5-trillion-by-2050
[2] https://www.theregister.com/2025/01/27/engineered_arts_robots_interview/
[3] https://www.bmwgroup.com/en/news/general/2024/humanoid-robots.html
[4] https://www.theregister.com/2024/10/17/boston_dynamics_lbm/
[5] https://www.tesla.com/AI
[6] https://www.hyundaimotorgroup.com/en/innovation/CONT0000000000005047
[7] https://www.theregister.com/2023/08/30/quadruped_dogs_gun_xm7/
[8] https://www.theregister.com/2023/04/12/digidog_returns_nyc/
[9] https://www.theregister.com/2025/11/07/foxconn_humanoid_robots_nvidia_server/
[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/research&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2aThVl9vdRsTR1ZG7VkXkaAAAAEo&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[11] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/research&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aThVl9vdRsTR1ZG7VkXkaAAAAEo&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/research&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aThVl9vdRsTR1ZG7VkXkaAAAAEo&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[13] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/research&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aThVl9vdRsTR1ZG7VkXkaAAAAEo&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[14] https://github.com/Bin4ry/UniPwn/blob/main/README.md
[15] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/research&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aThVl9vdRsTR1ZG7VkXkaAAAAEo&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[16] https://www.theregister.com/2025/09/27/rednovember_chinese_espionage/
[17] https://www.theregister.com/2024/12/06/chinese_cyberspy_us_data/
[18] https://carnegieendowment.org/research/2025/11/embodied-ai-china-smart-robots?lang=en
[19] https://www.theregister.com/2025/11/13/aidol_russia_robot_fail/
[20] https://www.theregister.com/2025/09/13/to_make_a_humanoid_robot/
[21] https://www.theregister.com/2025/11/07/foxconn_humanoid_robots_nvidia_server/
[22] https://www.theregister.com/2025/05/13/amazon_robots_make_progress_picking/
[23] https://www.theregister.com/2025/08/05/train_robots_baby_carriers/
[24] https://www.theregister.com/2024/12/19/humanoid_robots_remote_contral/
[25] https://www.youtube.com/watch?v=f3c4mQty_so
[26] https://whitepapers.theregister.com/
[1]Morgan Stanley recently predicted robot revenue could surpass $5 trillion by 2050, and firms including Unitree Robotics, Agility Robotics, and [2]Engineered Art , along with major carmakers including [3]BMW , [4]Toyota , [5]Tesla , and [6]Hyundai (which also owns Boston Dynamics), are all developing humanoid robots.
These bipedal machines and their four-legged friends are slated for use [7]on the battlefield and in [8]law enforcement operations , in labs and academia, plus warehouses and [9]manufacturing facilities . As such, building security into these robots "is imperative," Joseph Rooke, risk insights director at Recorded Future's Insikt Group, told The Register .
[10]
With 3 billion of these robots in use by 2060, according to BofA Global Research's forecast, the worst-case scenario from a security perspective would be "an I, Robot situation with no coming back," Rooke said in an interview. "Botnets in a physical form is now."
[11]
[12]
In a report published Tuesday, Rooke outlines the potential fallout of not taking these precautionary measures immediately, and predicts a whole new industry dedicated to securing these robots will likely emerge in the next decade.
This isn't just the stuff of Hollywood or sky-is-falling security vendors either.
[13]
Researchers in late September published technical details about a working proof-of-concept hack that exploited [14]multiple security flaws – hardcoded cryptographic keys, trivial authentication bypass, and unsanitized command injection – in Unitree Robotics' Bluetooth Low Energy (BLE) Wi-Fi configuration interface used by the Chinese company's humanoid robots.
"What makes this particularly concerning is that it's completely wormable – infected robots can automatically compromise other robots in BLE range," wrote Víctor Mayoral-Vilches, Andreas Makris, and Kevin Finisterre. "This vulnerability allows the attacker to completely take over the device."
Three factors combine to form the "perfect storm" for these embodied AI systems, according to Rooke.
[15]
"First: we already use robotics, we've been using robotics in factories for a long time, and now we're developing walking ones," he said.
You've got robotics, you've got AI, and now you've got the need. It's the perfect storm for this to just skyrocket
"The second thing is, we've got the means for these embodied things to learn, so their sensors and their hearing devices can now learn the same way that you train an AI in a server box where it's contained."
The third factor has to do with the global population decline combined with an aging population, which is expected to lead to labor shortages and many countries turning to technology in general – robots in particular – to boost productivity.
"You've got robotics, you've got AI, and now you've got the need," Rooke said. "It's the perfect storm for this to just skyrocket."
Like with any internet-connected devices, robots are vulnerable to cyberattacks in the form of hijacking, data leaks, and long-term espionage and IP theft, putting not only the users of these machines at risk but also the companies (and their suppliers) that make humanoid robots.
While Recorded Future hasn't publicly reported any robotics firm breaches, its threat hunters have been tracking [16]RedNovember (Microsoft calls this crew [17]Storm-2077 ) and other Chinese government-sponsored spy groups that target defense, electronics, and manufacturing companies.
"I don't have specific evidence of them going after robotics, although absolutely it's their MO," Rooke said. "If your sector is listed in China's 15th five-year plan, you're basically being given a heads-up."
The most recent five-year plan puts a big emphasis on [18]AI and smart robots and their role in economic growth.
However, as Russia (with [19]limited success thus far) and other nations put more resources into humanoid robot R&D, "espionage makes sense in terms of the dangers that the actual robots themselves face," according to Rooke.
[20]Inventor who encouraged Elon Musk to make Optimus says most humanoid robots today are 'terrifying'
[21]Foxconn hires humanoid robots to make servers at Nvidia's Texas factory
[22]Amazon tested warehouse robots and found they're not ready to replace humans
[23]How to train your robot: Wear a tiny one in a baby carrier
Along similar lines, if your company supplies critical components to a firm developing advanced robots, consider your firm at risk of being targeted in a larger supply chain, he added.
There's also potential security risks for consumers as [24]home-helper humanoid robots like [25]Neo hit the market, and to that end Rooke says it's likely to be the consumer's responsibility to update the robots' software, similar to what happens after someone buys a laptop. "It's my job to update my Mac, or I am liable for problems if I get hacked because I haven't updated it," he explained. "The same thing could happen with some of these robots."
Additionally, he expects to see a new crop of companies specifically designed to secure humanoid robots emerge – so put that on your RSAC bingo card for 2030 and beyond. These machines are essentially IoT devices, Rooke said.
But they've also got embedded AI systems. And unlike other big, heavy IoT machines – like a connected refrigerator that tells you when you're running low on milk – these robots walk on two feet, and come equipped with "eyes" and "ears" that presumably could be co-opted for all manner of nefarious purposes.
Rooke says it's pretty speculative at this point what humanoid robot security startups will look like, but he has one guess: "IoT on steroids." ®
Get our [26]Tech Resources
[1] https://www.morganstanley.com/insights/articles/humanoid-robot-market-5-trillion-by-2050
[2] https://www.theregister.com/2025/01/27/engineered_arts_robots_interview/
[3] https://www.bmwgroup.com/en/news/general/2024/humanoid-robots.html
[4] https://www.theregister.com/2024/10/17/boston_dynamics_lbm/
[5] https://www.tesla.com/AI
[6] https://www.hyundaimotorgroup.com/en/innovation/CONT0000000000005047
[7] https://www.theregister.com/2023/08/30/quadruped_dogs_gun_xm7/
[8] https://www.theregister.com/2023/04/12/digidog_returns_nyc/
[9] https://www.theregister.com/2025/11/07/foxconn_humanoid_robots_nvidia_server/
[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/research&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2aThVl9vdRsTR1ZG7VkXkaAAAAEo&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[11] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/research&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aThVl9vdRsTR1ZG7VkXkaAAAAEo&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/research&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aThVl9vdRsTR1ZG7VkXkaAAAAEo&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[13] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/research&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aThVl9vdRsTR1ZG7VkXkaAAAAEo&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[14] https://github.com/Bin4ry/UniPwn/blob/main/README.md
[15] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/research&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aThVl9vdRsTR1ZG7VkXkaAAAAEo&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[16] https://www.theregister.com/2025/09/27/rednovember_chinese_espionage/
[17] https://www.theregister.com/2024/12/06/chinese_cyberspy_us_data/
[18] https://carnegieendowment.org/research/2025/11/embodied-ai-china-smart-robots?lang=en
[19] https://www.theregister.com/2025/11/13/aidol_russia_robot_fail/
[20] https://www.theregister.com/2025/09/13/to_make_a_humanoid_robot/
[21] https://www.theregister.com/2025/11/07/foxconn_humanoid_robots_nvidia_server/
[22] https://www.theregister.com/2025/05/13/amazon_robots_make_progress_picking/
[23] https://www.theregister.com/2025/08/05/train_robots_baby_carriers/
[24] https://www.theregister.com/2024/12/19/humanoid_robots_remote_contral/
[25] https://www.youtube.com/watch?v=f3c4mQty_so
[26] https://whitepapers.theregister.com/
Re: My Optimus is gonna
ParlezVousFranglais
But just hope your better half doesn't find any "extra-curricular" uses for it while you happen to be out of the house eh?...
Re: My Optimus is gonna
brainwrong
There'll be a new man of the house providing for them, whilst the old one lounges around being fat and lazy.
Re: My Optimus is gonna
KittenHuffer
[1]Plastering stilts are the ones to go for!
[1] https://www.amazon.co.uk/plastering-stilts/s?k=plastering+stilts
Unhackable robot
trevorde
Man in a spandex suit
Re: Unhackable robot
beast666
Just have them watch the BBC and read The Guardian enough and you'll soon see they are easily 'hacked'
RedNovember
TimMaher
See, they’ve already overrun.
Supposed to be RedOctober.
What a load of fearmongering CODSWALLOP!
Irongut
A global population decline would lead to a decline in manufacturing needs so no need to employ robots to make up for a labour shortage that wil not exist. More like a squall than a storm.
"I don't have specific evidence of them going after robotics, although absolutely it's their MO"
If you don't have any evidence then you're just making shit up. Did you get ChatGPT's help with this or is it all your own work?
This Rooke guy is almost as big a liar as Altman.
munnoch
"Give me your boots"
My Optimus is gonna
My Optimus is gonna: walk the dog - feed the animals - change the dishwasher - change the cat tray - fix my lightbulbs - shovel the snow - mow the lawn - build a garden shed - plant a garden - fetch the mail - take the tesla to shop for groceries - bring home some shingles - shingle the roof - pour a new driveway - install a new doorbell - change the winter tires - fix my motorcycle carburetor - fix the garage door - sneak around in the dark collecting catalytic converters - surveil the neighborhood - patrol the property with the rifle to make sure nobody goes after my catalytic converters. Also, it will build me a pair of stilts (I always wanted some).
(I won't let it do any surgery, but I'll let it pay for itself performing veterinary procedures in the bathtub - spay neuter etc.)