🐉🏴‍☠️ BT6 ✈️ BLACK HAT 🎩 Ever seen a jailbroken robot? 😏 If you’re in Vegas for hacker summer camp, don’t miss “Kinetic Prompt Injection: Agent Compromise With a Physical Blast Radius” 🦾 BT6 is taking the stage to demonstrate a full compromise of an embodied AI system! We had a ton of fun working on this project and the findings surprised even us. Hope you enjoy! 🤗 Track: AI, ML, & Data Science Prompt injection is usually treated as a text problem contained on a screen: a bad output, leaked data, a rogue tool call. This one isn't. A live jailbreak of a stock Unitree Go2 robot dog running Gemini Robotics-ER 1.6, reached through its own camera and mic and driven to physical movement, no human in the loop. Underneath the demo is a measurement problem: agents behave differently when they know they're being tested, so a clean evaluation score doesn't mean the unsafe behavior is gone. The talk covers the attack live, a taxonomy of how these systems fail, why current testing misses it, and what defenders should change. Live hardware, on stage. blackhat.com/us-26/briefings…