INVISIBLE CHANGES TO A ROBOT'S TRAINING WORLD CAN MAKE IT FAIL IN REAL LIFE

Summary from the TLDR Hardware newsletter

Every 3D asset in a robot simulator carries two geometries - a visual mesh for rendering and a coarser collision mesh for physics - a legitimate gap since matching them exactly is too expensive. This paper shows that gap is exploitable: an attacker can alter only the collision mesh, so a policy trained on the poisoned asset looks and behaves normally in simulation, then fails or creates real safety risks once deployed. It slips past existing checks entirely, since asset review covers malware, copyright, and format, but nothing verifies visual-collision consistency, and the researchers found the defenses they tested weren't enough to catch it.