Cyber Risks Span the AI Supply Chain, From Critical Minerals to Humanoid Robots
Summary
Recorded Future examines how geopolitical competition and cyber operations affect the AI supply chain, highlighting state targeting of mining and semiconductor organizations and security flaws in Unitree robots.
Key points
- The article describes the AI supply chain as a strategic contest spanning critical minerals, energy, chips, data centers, models, and machine applications.
- Recorded Future links state-associated infrastructure to targeting of a Canadian miner and reports state actors targeting an organization regulating seabed mining.
- Indonesia has faced repeated intrusions, while ransomware group BianLian published data stolen from Australia's Northern Minerals.
- Chinese state-sponsored group RedJuliett targeted 85 Taiwanese organizations in a campaign involving a semiconductor company and related technology organizations.
- Researchers found Unitree robot security issues including remote camera access, undisclosed telemetry transfers, hard-coded keys, authentication bypass, and command injection.
- The article warns that wireless vulnerabilities could let a compromised robot spread access to other machines, creating the potential for a physical botnet.
- It argues that growing deployment of AI-enabled robots makes security-by-design and assessment of exposure across the supply chain increasingly important.
Article Details
- Topic
- Geopolitical competition and cyber risks across the AI supply chain, from critical minerals and semiconductors to data centers, models, and embodied AI robotics.
Threat Actors
BianLianRansomware group that published data stolen from Australia's Northern Minerals after the company ordered China-linked investors to divest.RedJuliettChinese state-sponsored group observed targeting Taiwanese organizations, including a semiconductor company, through vulnerability scanning or attempted exploitation.
Vendors
Products
Figure 02BMW reports that the Figure 02 humanoid robot (developed by Figure AI) has assisted in the production of more than 30,000 X3 vehicles; GXO and Agility Robotics describe their partnership as the first formal commercialNVIDIA IsaacJust take a look at NVIDIA Isaac, for example.Unitree G1Figure 5: Unitree G1 vulnerabilities, business risks, and observed network activity (Source: Recorded Future)Unitree Go1Unitree R1
Countries
AustraliaCriminal groups are also part of the picture: after Australia's Northern Minerals ordered China-linked investors to divest, the ransomware group BianLian published its stolen data.CanadaChinaHistory offers a blunt lesson on this point: China has learned the hard way that the nation that integrates new technology into its economy first wins: Britain harnessed the power of steam and ruled for a century;GreenlandArctic ice has lost more than 70% of its volume since the 1980s, exposing deposits and shipping lanes; Greenland holds 25 of the European Commission's 34 designated critical raw materials; and China and Russia areIndonesiaIndonesia, which holds over 40% of global nickel reserves and whose refining capacity is increasingly controlled by Chinese companies, has absorbed repeated, sophisticated intrusions over the past five years.JapanJapan has recovered rare earths from 6,000 meters beneath the Pacific; Washington has ordered a rapid scaling of seabed mining capability; Arctic ice has lost more than 70% of its volume since the 1980s, exposingRussiaGreenland holds 25 of the European Commission's 34 designated critical raw materials; and China and Russia are expanding their presence in Antarctica, where mining is off-limits but only until 2048.TaiwanLayer two is chips, where America and its allies dominate design, and Taiwan's TSMC dominates fabrication.UkraineUnited StatesWhile the United States (US) has many data centers, they are at risk of becoming a massive cost for short-term economic gain.
Industries
Artificial intelligenceOne of the main technologies in question this time is artificial intelligence, specifically its final form, embodied AI, which is essentially physical intelligence with cameras, motors, and hands.Data centersChips supply data centers. Data centers power the training of models, and models are acquiring arms and legs.MiningThe American response has been a scramble of stockpiling, domestic mining investment, and attempts to assemble critical minerals trade blocs with allies.RoboticsFigure 1: Image showing how humanoid robotics aims to copy the human body (Source: Morgan Stanley)SemiconductorsTaiwan produces many of the advanced semiconductors on which frontier models depend, and it is targeted accordingly.