CriticalOpen
E-stop on the control network
Arm commanded remotely; its e-stop is signalled over the same network
HighOpen
Vulnerable SBOM components
9 known CVEs across 142 components, 1 reachable
CriticalOpen
Unauthenticated rosbridge
Velocity commands accepted on :9090, no token
HighOpen
Unsigned firmware
Modified image accepted for install, no signature check
HighOpen
Facility map readable
Site map read straight off the MQTT broker
security layer for physical AI and robotics
Glitched tests the software inside your robots and turns technical findings into clear decisions for your engineering, operations and risk teams.
Our vision is to make GLITCHED the trust mark for physical AI, starting with robot software. We help fleet operators turn security findings into release decisions backed by evidence, so trust can keep pace with deployment.
Where robots now work.
The same kind of software now runs machines in fields, hospitals, warehouses, homes and places people cannot easily reach.
Picking, planting and monitoring crops in greenhouses and open fields.
Companionship, mobility help and monitoring for people living with age or illness.
Instruments steered by surgeons, with more autonomy arriving step by step.
Delivery robots on pavements and fleets moving goods through warehouses.
Patrol robots watching car parks, campuses and buildings.
Arms and mobile robots building and moving things along the line.
Bricklaying, surveying and heavy work on building sites.
Cleaning, tidying and fetching in the home.
Inspection and repair beneath the surface, where people cannot easily go.
Rovers and crawlers working on other worlds.
Crawlers checking drains, pipelines and tunnels from the inside.
Wherever one of these ships, software is in control of something that moves near people. That is the part we test.
See how we testAgentic testing for robotics.
AI is cheap, it understands protocols, and it knows how systems work. The strongest attacker a robot will meet is already a model, so we test with one. We run AI agents against robotic systems the way an attacker would, while a fleet is still something you can change.
Voice, radio, machine-readable text. The interfaces that used to be protected by obscurity, and are not any more.
An agent explores the state space, chains actions together, and keeps going after the first thing that works.
What was attempted, what succeeded, and what it means for the decision to ship, written for the people making that call.
Reviewed
Robotics on the radar.
Security research, real-world deployments, and the rules taking shape around them. A curated view, linked to the original sources.
6 signals · newest first
No signals match these filters. Try another filter or reset them.
Salem, US
Agility and FORT announced a partnership to extend Digit 5’s safety architecture with an offboard interface connecting the robot to external safety systems.
Partnership announcement · Describes planned safety infrastructure, not an independent safety assessment.
Agility RoboticsMetzingen, Germany
NEURA announced a healthcare division and an autonomous mobile platform for moving empty beds and sterile goods through clinical environments.
Product announcement · The first application targets hospital logistics; the release does not establish deployment scale.
NEURA RoboticsToronto, Canada
NVIDIA’s ROSCon keynote covered accelerated memory transports in ROS 2 Lyrical, a feature for transferring large tensors and point clouds with less overhead.
Conference session · The linked programme describes the feature and its integration into robotics applications.
NVIDIA · ROSCon 2026Savannah area, US
Boston Dynamics opened a training centre at Hyundai’s Georgia campus. Atlas robots are learning manufacturing tasks, including sequencing automotive parts for assembly.
Training facility · The announcement describes preparation for manufacturing deployment, not full production rollout.
Boston DynamicsBrussels · European Union
The EU Cyber Resilience Act’s reporting obligations began applying on 11 September. The Commission’s implementation timeline places full application on 11 December 2027.
Regulatory milestone · The date marks reporting duties, not the start of every requirement under the Act.
European CommissionHangzhou, China · manufacturer
Researcher Olivier Laflamme published two root-code-execution chains affecting tested Unitree G1 robots, assigned CVE-2026-76639 and CVE-2026-76640.
Disclosure updated 01 Sep · The researcher reports firmware 1.5.5.0 blocks the chain, but states that the fix has not been independently verified.
Olivier Laflamme · original researchNorfolk, UK
Fieldwork Robotics, a University of Plymouth spin-out, raised a £2.5 million Seed+ round and is deploying production harvesting machines on farms in Norfolk and Staffordshire under an Innovate UK programme.
Company funding announcement · It expects multi-robot fleets in commercial use from 2027; performance has not been independently assessed.
Future FarmingSeoul, South Korea
Two ministries unveiled an AI Care Technology strategy: AI and smart-home monitoring for older people living alone, smart facility models, and specialised physical AI for care settings from 2028.
Government strategy · A plan and timeline, not a deployment; the 2028 physical-AI milestone is a target.
Seoul Economic DailySilver Spring, US
The FDA granted de novo classification to the OTTAVA soft-tissue robotic system for general surgery procedures including gastrectomy, splenectomy, small bowel resection and appendectomy.
Regulatory action · Surgeon-controlled system; a commercial launch timeline has not been disclosed.
Indian Pharma PostAmsterdam, Netherlands
Monumental, which works as an autonomous bricklaying subcontractor, raised a $32 million Series B led by Khosla Ventures to expand its fleet across Europe and the UK and launch in the US.
Funding announcement · Fleet size and homes-built figures are company claims.
Tech.euUS Gulf Coast
Nauticus Robotics said one Comanche ROV supports offshore wind development in the US Northeast and the other is doing platform inspection off the US Gulf Coast.
Company announcement · Bids it mentions are not included in current activity and may not become contracts.
Marine Technology NewsLincoln, US
The Nebraska grocer introduced Simbe’s autonomous Tally robot and Store Intelligence platform at select stores to track product availability, pricing and placement.
Deployment announcement · Number of stores and results were not given.
Robotics 24/7Busan, South Korea
Busan City will send semi-autonomous crawlers with cameras, 3D laser scanners and ultrasonic and gas sensors into sewers, with deep learning flagging six defect types, in a five-month project from August.
Municipal programme · A 125 million won project, not a city-wide rollout.
NoCut NewsGeneva, Switzerland
The 2025 edition of ISO 10218 (Part 1 for robots, Part 2 for applications and cells) is the first major revision since 2011. Trade coverage reports it folds in collaborative-robot requirements from ISO/TS 15066 and makes functional safety and cybersecurity requirements explicit.
Standard · Dates and detail come from ISO’s catalogue listing and trade coverage; national adoptions such as ANSI R15.06 and CSA Z434 follow separately.
ISOBarcelona, Spain
The draft covers industrial mobile robots that need active control to stay upright, including humanoids, quadrupeds and balancing wheeled platforms, filling a gap left by ISO 10218 and ISO 3691-4.
Draft standard · Still in committee, so not yet in force. Date is the working group’s latest session I could confirm; publication is estimated for late 2026 or 2027.
i-SCOOPAugsburg, Germany
KUKA announced Security Level 2 certification under IEC 62443-4-2 for its iiQKA.OS2 operating system and KR C5 controller platform, and says it also meets EN ISO 10218-1:2025.
Company announcement · The page names no certifier or certificate number, and “first in robotics” is KUKA’s own claim.
KUKACurated snapshot, reviewed 12 October 2026. Markers locate the organisation or event, not affected devices. Dates refer to announcements, disclosures, or policy milestones.