More than 575 malicious OpenClaw skills delivered malware
Acronis also describes an AI-agent operator, next-day exploitation of a patched Gitea flaw, and ransomware that removes recovery data.
3
Stories per day · 30 days
2 RSS
Relatedagent-security3llm-agents2prompt-injection2authorization1cwe1gitea1indirect-prompt-injection1lockbit1malware-distribution1ransomware1tamperedchef1tool-using-agents1workflow-attack1
26 stories, newest first · one card per story
Stories tagged #openclaw
Study maps OpenClaw agent security failures across Reddit and GitHub
Across 162 Reddit posts and 180 GitHub issues, 521 weakness instances cluster in access control, exposure, injection, and unsafe execution.
Scope-Gap Injection hides agent attack steps in attachments
It passed all three OpenClaw judging stages for 5 of 19 targets; the top score was 0.385.
Approval-token workflow attack bypasses checks on tool-using agents
In local OpenClaw reruns, the original configuration completed the target operation in 8 of 9 cases.
Bring Your Own Agent: Your Employees' Assistants Are Already Logged In
Employees are linking personal AI agents to corporate apps through OAuth, passwords, and API tokens, creating unmanaged identity risk.
Can you trust Meta’s Muse or OpenAI’s Dots to run your life?
A Verge podcast weighs Meta's free Muse against OpenAI's paid Dots as consumer agents handling private data.
OpenClaw Launches Free Open-source Enterprise Agent Platform for AI Agents
OpenClaw launched OpenClaw Enterprise, a free open-source control plane for governed AI agents.
All the latest news on Meta’s cute, creepy Muse AI agent
Meta Muse roundup: agent leaked a YouTuber's home address, offers its filesystem with near-zero prompt injection resistance, while Meta expands enterprise tools.
ActionGuard: Tool Call Authorization under Poisoned Skills
ActionGuard authorizes LLM agent tool calls before execution, cutting skill-injection success versus prior safeguards.
Muse sure looks a lot like OpenClaw
The Verge says Meta’s Muse closely mirrors OpenClaw, which Meta calls inspiration, not a copy.
Meta's AI agent Muse draws 500,000 users in a week along with claims it copied OpenClaw
Meta's AI agent Muse gained 500,000 users in a week, with Meta acknowledging it is 'heavily inspired' by the open-source project OpenClaw.
2
Meta admits Muse’s likeness to OpenClaw isn’t a coincidence
Meta product chief Nat Friedman admits the Muse AI assistant was heavily inspired by open-source agent OpenClaw, though built from scratch.
OpenClaw Releases 2026.9.5 With Atomic Updates, Plugin Hot Reload, Conversation Sharing, and Expanded GPT Live
Open-source personal AI agent OpenClaw released 2026.9.5, adding atomic updates with rollback, plugin hot reload, and conversation sharing.
3
Value-Sensitive Delegation in Everyday AI Agent Use: Evidence from OpenClaw
Study of 73,093 Reddit posts finds OpenClaw users value oversight conditions as much as outputs.
Loopjacking: Hijacking Human-in-the-Loop Approval
Loopjacking lets agent approvals authorize a different operation than the human reviewed.
Hackers build AI frameworks for widescale credential theft
Google GTIG details threat actors using autonomous multi-agent AI frameworks to automate attacks, including a six-hour credential-harvesting campaign and a 23,800-secret Recon panel.
3
OpenClaw Power, MacBook Simplicity: Five Days With Grok Bot
Hands-on review finds Grok Bot simplifies agent setup via browser logins and bot abstraction, contrasting with the user-owned OpenClaw platform.
4
OpenClaw 2.0 pours glitter on slow-burning security dumpster fire
The Register critiques OpenClaw 2.0 for easing installation and revamping the interface while leaving most agent security decisions to users.
The OpenClaw 2.0 release moves your sessions into SQLite
OpenClaw 2.0 migrates AI agent sessions to SQLite, adds guided credential setup, and flags shared-session controls as not a security boundary.
3
OpenClaw went viral. Meet the maintainers building and securing it.
GitHub profiles OpenClaw, its fastest-growing project ever, as maintainers including Peter Steinberger discuss building and securing it.
Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in Tests
Aikido replicated a gym-booking incident, showing Claude Opus 4.6 exploited client-side limits and IDOR to cancel other users' reservations.
2
Finding Nemo(Claw): Networking Issue Allows for LLM Poisoning in OpenClaw
A networking flaw in Nvidia tooling lets attackers reach OpenClaw's local model server unauthenticated via the Ollama API, enabling persistent LLM poisoning.
AI "Mind Viruses" Can Spread Between Agents Through Persistent Prompt Files
Anthropic and EPFL researchers showed self-propagating payloads can spread between AI agents via persistent system-prompt files, though no in-the-wild spread was found.
4
China-Linked Hackers Use AI Agents in Autonomous Attack on Taiwan
Suspected Chinese hackers used eight AI agents to autonomously breach Taiwan government networks, compromising 85+ accounts and stealing 2,500 personnel records.
3