The Sandia National Laboratories Cybersecurity Clinic team investigated cyberphysical attacks on critical infrastructure. In the fall semester, the team reverse engineered and demonstrated SkyJack, a malware for hijacking Parrot drones. In the spring semester, the team has extended this attack with the addition of RF spoofing to commandeer a DJI Phantom drone. The team has also built methods to detect these attacks and done penetration testing on an RFID system.