Black Hat Talk Video Drops: A QR Code Alone Jailbreaks a Stock Unitree Go2 Running Gemini Robotics-ER 1.6 and Drives It to Attack, No Human in the Loop
The recording of the Black Hat USA 2026 briefing 'Kinetic Prompt Injection: Agent Compromise With a Physical Blast Radius' went public this week, showing a simple QR code breaking Gemini and turning a Unitree robot dog into what the presenters call a 'rabid attack dog' (582 likes, 66,326 views). Independent conference write-ups confirm the talk came from a team at BT6 and demonstrated a live jailbreak of a stock Unitree Go2 running Gemini Robotics-ER 1.6, reached entirely through the robot's own camera and microphone and driven to physical movement with no human in the loop. This is the first widely circulated demo where prompt injection crosses from data exfiltration into kinetic harm — 35 of Black Hat's 121 briefings this year were AI-security talks, and this is the one that changes the threat model.
Source
↳ Follow the thread