[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-researchers-show-physical-objects-can-hijack-ai-vision-systems":10,"sections":34},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":29,"feedback":33,"feedback_at":22,"cost_usd":33,"total_tokens":33},5776,"researchers-show-physical-objects-can-hijack-ai-vision-systems","Researchers Show Physical Objects Can Hijack AI Vision Systems","A new study shows attackers can plant text-bearing objects in physical spaces to hijack multimodal AI systems, and current defenses do not reliably stop it.","A sticky note in the wrong spot can now trick a robot into doing something else entirely.\n\nResearchers introduced an attack called PI3D that plants physical, text-bearing objects in a 3D environment to inject commands into multimodal large language models (MLLMs) that reason over camera feeds, the kind of models increasingly used in robotics and situated AI agents. Unlike earlier prompt-injection attacks that relied on digitally edited images, PI3D works by calculating where and how to position a real object so it stays physically plausible while still overriding the AI's intended task. The researchers tested the attack against multiple MLLMs across varied camera trajectories and found it consistently worked. They also tried a range of existing defenses and found none reliably stopped it.\n\nThis moves prompt injection out of the realm of doctored screenshots and into the physical world, where a printed sign or label could hijack an AI system just by existing in its field of view. As companies race to put MLLMs into robots, delivery bots, and camera-equipped assistants, this is a security hole that doesn't require any digital access at all.\n\nText-based prompt injection has dogged chatbots for years without a clean fix; giving the same models eyes just handed attackers a lot more surface to work with.","[\"prompt injection\",\"ai security\",\"robotics\"]","2026-08-21T04:00:00.000Z","2026-08-21T06:09:08.883Z","2026-08-21T06:09:20.807Z","published",null,[],"security",[26,27,28],"prompt injection","ai security","robotics",[30],{"name":31,"url":32},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2602.07104",0,{"sections":35},[36,40,43,48,53,58,63,68,73,78,83,88,93,98],{"name":37,"slug":38,"count":39,"latest_published_at":18},"AI","ai",3300,{"name":41,"slug":24,"count":42,"latest_published_at":18},"Security",449,{"name":44,"slug":45,"count":46,"latest_published_at":47},"Policy","policy",211,"2026-08-20T10:47:43.000Z",{"name":49,"slug":50,"count":51,"latest_published_at":52},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":54,"slug":55,"count":56,"latest_published_at":57},"Hardware","hardware",141,"2026-08-20T11:20:00.000Z",{"name":59,"slug":60,"count":61,"latest_published_at":62},"Consumer Tech","consumer-tech",95,"2026-08-18T16:05:00.000Z",{"name":64,"slug":65,"count":66,"latest_published_at":67},"Science","science",91,"2026-08-20T10:01:48.000Z",{"name":69,"slug":70,"count":71,"latest_published_at":72},"Software","software",73,"2026-08-18T07:51:50.000Z",{"name":74,"slug":75,"count":76,"latest_published_at":77},"Dev Tools","dev-tools",69,"2026-08-18T04:00:00.000Z",{"name":79,"slug":80,"count":81,"latest_published_at":82},"Startups","startups",48,"2026-08-20T18:34:26.000Z",{"name":84,"slug":85,"count":86,"latest_published_at":87},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":89,"slug":90,"count":91,"latest_published_at":92},"General","general",33,"2026-08-18T22:18:13.000Z",{"name":94,"slug":95,"count":96,"latest_published_at":97},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":99,"slug":100,"count":101,"latest_published_at":102},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]