Analysts Warn of Cybersecurity Risks in Humanoid Robots

The report highlights emerging cybersecurity risks in the humanoid robotics sector: recorded state-linked espionage campaigns and commodity malware (e.g., DcRAT, AsyncRAT, XWorm, PrivateLoader, Havoc) are targeting robotics manufacturers and supply chains, researchers have demonstrated critical vulnerabilities in widely-sold Unitree humanoids (including rooting and wormable Bluetooth propagation), and the industry lacks mature security practices—raising both intellectual property and physical safety concerns while prompting work on mitigations like SROS and zero-trust measures.