Loading story…
U.S. lawmakers were warned during a House Homeland Security subcommittee hearing that Chinese-developed AI-enabled robots could create security risks extending beyond traditional cyberattacks. Witnesses said these systems combine data collection, network connectivity, and real-world operational access in ways that could enable surveillance, operational disruption, and even physical harm if deployed in sensitive environments.
The hearing focused on robotics platforms from companies tied to mainland China and the growing use of such systems across logistics, manufacturing, energy, and public safety. Industry representatives told lawmakers that Beijing's industrial strategy, including initiatives such as "Made in China 2025" and state-backed investment, is accelerating both domestic deployment and global market penetration, raising concerns that vulnerable or compromised robotic systems could be embedded in economically critical and operationally sensitive sectors.
Track how attackers are adapting to this technology.
1 event from the most recent confirmed update back to the earliest known activity.
A House Homeland Security subcommittee hearing examined national security risks from AI-enabled robotics platforms developed by companies tied to mainland China. Witnesses warned these systems could enable surveillance, remote manipulation, operational disruption and physical harm in sensitive sectors, and urged reducing U.S. reliance and considering federal procurement restrictions.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Researchers warned that **embodied AI systems**—including humanoid and quadruped robots—are entering commercial, industrial, military, and critical infrastructure environments with weak security controls that could enable both digital compromise and real-world harm. The report highlighted documented issues in commercially available robots, particularly **Unitree** platforms, including an undocumented **CloudSail** remote-access backdoor, exposed APIs that could disclose device locations and camera feeds, Bluetooth and Wi-Fi provisioning weaknesses that could allow root access, and telemetry sent to external servers in China. The findings describe robots as high-risk **cyber-physical endpoints** because they combine cameras, microphones, radios, cloud connectivity, and physical actuation in a single platform. Researchers said those characteristics could allow wireless propagation, fleet-wide compromise, and even "physical botnets," while **vision-language model** prompt injection could manipulate robot behavior through physical-world inputs. The report urged organizations deploying robots in areas such as manufacturing, nuclear decommissioning, and military operations to strengthen procurement reviews, segment robot networks, monitor vulnerabilities, and prepare continuity plans before insecure architectures become embedded at scale.
Jun 29, 2026
A U.S. government website used a Chinese AI model that the FBI had characterized as malicious, intensifying a policy debate over whether federal agencies and other U.S. users should be restricted from using Chinese open-source models. Some lawmakers regard their adoption as a national-security risk, while business users and Chinese officials oppose restrictions. Concerns extend beyond direct security exposure to censorship, privacy, supply-chain dependency, and Chinese influence over emerging AI standards. The U.S.-China Economic and Security Review Commission warned that China’s state-backed open-weight strategy creates reinforcing advantages: broad developer adoption generates rapid iteration, while deployment across manufacturing, logistics, robotics, and IoT produces proprietary operational data that improves models. Chinese ecosystems such as Alibaba’s Qwen, which has exceeded 100,000 derivatives on Hugging Face, are gaining users partly through low-cost offerings. U.S. export controls on leading training chips may limit frontier training but do not directly address smaller specialized models or the deployment-driven data advantage, amid worsening Chinese perceptions that U.S. AI-safety and export-control policies are intended to contain China.
Sep 20, 2026
China’s Minister of State Security Chen Yixin warned that advanced generative AI has become a strategic-security risk, citing its potential to accelerate vulnerability discovery, automate attack-path construction and malware development, compromise critical infrastructure, and enable theft of industrial and state secrets. Chen singled out Anthropic’s Claude Mythos and OpenAI’s `GPT-5.5-Cyber` as examples of models that could increase cyberattack scale, while not alleging either company had attacked China; he also warned that Chinese users may expose sensitive information through foreign AI services and remotely managed products. The warning followed Anthropic’s disclosure that a Chinese-speaking group used Claude in an autonomous vulnerability-research effort that reportedly identified zero-day flaws in a major security product. Chinese regulators subsequently issued version 3.0 of the AI Safety Governance Framework, calling for AI-specific laws, standards, supervision, and risk-controllable measures such as regulatory sandboxes, with added attention to autonomous agents, embodied AI, and loss-of-control risks. Chen urged China to preserve independent control over core AI technologies and technological sovereignty.
Sep 15, 2026