VicOne discovers 28 zero day vulnerabilities in physical artificial intelligence tools

Cybersecurity firm VicOne identified an initial set of 28 zero-day security findings in less than two days, The Robot Report reported. The findings were uncovered using artificial intelligence-assisted research targeting software and tools supporting the physical artificial intelligence ecosystem. According to The Robot Report, all 28 findings are currently classified as zero-day vulnerabilities based on initial validation. [1]

The affected software includes projects developed or maintained by major technology firms including Google, NVIDIA, and Meta. The Robot Report stated that many of these tools are used by development teams to train, simulate, test, and operate robots. Security weaknesses in these tools could potentially influence built models and test results. [1]

A zero-day is a computer security vulnerability that is unknown to its developers or anyone capable of mitigating it. Until the software creator remedies the flaw, malicious actors can exploit the vulnerability to carry out attacks. [4]

The total count of vulnerabilities may change following review by vendors and vulnerability authorities. The Robot Report noted that some of the identified zero-day findings do not yet have assigned CVE tracking numbers. [1]