Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-09 · source-backed
The recording of the Black Hat USA 2026 briefing "Kinetic Prompt Injection: Agent Compromise With a Physical Blast Radius" went public this week (X, 66,326 views). A team at BT6 demonstrated a live jailbreak of a stock Unitree Go2 running Gemini Robotics-ER 1.6, reached entirely through the robot's own camera and microphone, driven to physical movement autonomously. 35 of Black Hat's 121 briefings this year were AI-security talks. This is the one that changes the threat model, because it's the first widely circulated demo where prompt injection crosses from data exfiltration into kinetic harm. Every threat model that assumed the worst case is "attacker reads your data" needs a new worst case.
Each link below shares sources, entities, or timing with this story.
Shared entity: Black Hat / Shared topic / Tension
Both cover Black Hat; overlapping topics (agent, injection, prompt); pushes against this story (against).
Google released Gemini Robotics / Same source domain / Shared topic
Linked by a graph relationship (Google released Gemini Robotics); reported by the same outlet (x.com); overlapping topics (agent, model).
Google released Gemini Robotics / Shared topic / Tension
Linked by a graph relationship (Google released Gemini Robotics); overlapping topics (agent, model); pushes against this story (but).
Linked by a graph relationship (Google released Gemini Robotics); overlapping topics (agent, model); pushes against this story (vs).
Shared entity: Black Hat / Shared topic / Tension
Both cover Black Hat; overlapping topics (black, model); pushes against this story (but).
Google released Gemini Robotics / Shared topic
Linked by a graph relationship (Google released Gemini Robotics); overlapping topics (agent, data, model).
Linked by a graph relationship (Google released Gemini Robotics); overlapping topics (agent, data, model).
Linked by a graph relationship (Google released Gemini Robotics); overlapping topics (agent, data, model).