Security Statement and Independent Review Step from Eiliko Robot's Manufacturer

Following the reporting of major security vulnerabilities in the Eiliko artificial intelligence robot by The Verge and security researcher Sammy Azdoufal, manufacturer Energize Lab issued a statement. The company announced that it will hire an independent security firm, close external backend accesses, and delete stored conversation logs and user profiles.

Following the exposure of security vulnerabilities in the Eiliko artificial intelligence robot, manufacturer Energize Lab stated in an email attributed to CTO Du Xiaoyu that they acknowledged the core issues reported and were working on each of them. The company announced that it would hire an independent security firm for a complete review of all systems.

Energize Lab noted that as of Wednesday, all external access to backend systems was shut down and the interface allowing remote modification of robot responses was disabled. Furthermore, it was committed that conversation logs and user profiles would no longer be stored, and currently stored data would be deleted.

However, researchers stated that some vulnerabilities and data leaks persist in the systems. Sammy Azdoufal confirmed that full SSH access to the robots continues and that audio recordings and photos continue to be stored at publicly accessible, insecure web addresses.