[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-ai-planner-turns-lidar-spoofing-attacks-into-a-sure-thing":10,"sections":41},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":30,"tags":31,"sources":36,"feedback":40,"feedback_at":22,"cost_usd":40,"total_tokens":40},9188,"ai-planner-turns-lidar-spoofing-attacks-into-a-sure-thing","AI Planner Turns LiDAR Spoofing Attacks Into a Sure Thing","Researchers used a multimodal AI model to plan roadside LiDAR attacks that adapt to traffic in real time, pushing simulated collision rates to 100 percent.","A roadside AI now picks the exact moment and method to fake out a self-driving car's LiDAR - and it wins every time in simulation.\n\nResearchers built TACTIC, a framework that pairs a roadside sensor rig with a multimodal large language model to plan physical LiDAR attacks on the fly. The system never touches the target vehicle's own sensors. Instead it watches traffic from the roadside, uses an MLLM to turn that view plus local measurements into a live map of who is near whom, and picks between two tricks: making a lead vehicle appear farther away than it is, or spoofing a phantom obstacle to trigger emergency braking. In 280 randomized CARLA simulation runs, the full system scored a 100% collision rate, compared with 35% for a fixed attack pattern, 60% for random selection, and 75% for a simpler LLM limited to picking a mode with default settings.\n\nThe gap matters because most published LiDAR attacks assume a static scene and a single pre-tuned trick. TACTIC's results suggest that assumption understates the real risk: feeding the model both camera images and physical measurements beat either input alone (100% versus 65% and 75%), and reworking the pipeline to replan asynchronously cut the system's reaction time to traffic changes from 7.4 seconds to 2.0 seconds, fast enough to keep up with real driving.\n\nWorth noting what this is not: it is a simulated demonstration against a gray-box target, run with an attacker-controlled roadside sensor setup, not a confirmed attack on production self-driving cars. Still, it is a clear signal that LiDAR defenses tested only against fixed, context-blind attacks are being tested against the wrong adversary.","[\"lidar\",\"autonomous-vehicles\",\"adversarial-ai\",\"ai-security\"]","2026-10-01T04:00:00.000Z","2026-10-02T00:55:57.204Z","2026-10-02T00:56:00.792Z","published",null,[24],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"Cut the closing aphorism ('attacker who adapts to the scene usually beats...') — it's an unattributed editorializing flourish that adds no new fact or source-backed analysis beyond what the preceding paragraph already established.","resolved","security",[32,33,34,35],"lidar","autonomous-vehicles","adversarial-ai","ai-security",[37],{"name":38,"url":39},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2609.39969",0,{"sections":42},[43,47,50,54,59,64,68,73,78,82,87,92,97,102],{"name":44,"slug":45,"count":46,"latest_published_at":18},"AI","ai",5599,{"name":48,"slug":30,"count":49,"latest_published_at":18},"Security",815,{"name":51,"slug":52,"count":53,"latest_published_at":18},"Policy","policy",430,{"name":55,"slug":56,"count":57,"latest_published_at":58},"Deals","deals",298,"2026-09-30T21:00:26.000Z",{"name":60,"slug":61,"count":62,"latest_published_at":63},"Hardware","hardware",196,"2026-09-30T13:00:00.000Z",{"name":65,"slug":66,"count":67,"latest_published_at":18},"Science","science",163,{"name":69,"slug":70,"count":71,"latest_published_at":72},"Consumer Tech","consumer-tech",149,"2026-09-30T22:57:11.000Z",{"name":74,"slug":75,"count":76,"latest_published_at":77},"Dev Tools","dev-tools",93,"2026-10-01T02:30:48.000Z",{"name":79,"slug":80,"count":76,"latest_published_at":81},"Software","software","2026-09-30T21:41:11.000Z",{"name":83,"slug":84,"count":85,"latest_published_at":86},"Startups","startups",84,"2026-09-30T20:39:09.000Z",{"name":88,"slug":89,"count":90,"latest_published_at":91},"Gaming","gaming",51,"2026-09-30T16:24:30.000Z",{"name":93,"slug":94,"count":95,"latest_published_at":96},"General","general",50,"2026-09-30T21:37:54.000Z",{"name":98,"slug":99,"count":100,"latest_published_at":101},"Reviews","reviews",31,"2026-09-28T14:31:34.000Z",{"name":103,"slug":104,"count":105,"latest_published_at":106},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]