Attackers are running paid Facebook ads that look like official Microsoft promotions, then directing users to near-perfect ...

'Claude DXT's container falls noticeably short of what is expected from a sandbox' LayerX, a security company based in Tel Aviv, says it has identified a zero-click remote code execution vulnerability ...

ZeroDayRAT spyware compromises iPhone and Android devices to access messages, notifications, location data and live camera ...

A prompt-injection test involving the viral OpenClaw AI agent showed how assistants can be tricked into installing software without approval.

Cline CLI 2.3.0 was published with a stolen npm token, installing OpenClaw in an 8-hour attack affecting ~4,000 downloads.

A zero-click flaw in Anthropic’s Claude Desktop Extensions allows attackers to trigger remote code execution via Google ...

According to Microsoft's release notes, the update fixes 25 elevation of privilege flaws, 12 remote code execution ...

"From an AI research perspective, this is nothing novel," one expert told TechCrunch.

Apple power users on macOS Tahoe are deliberately undoing parts of Apple's latest interface overhaul in order to remove the ...

It lives on your devices, works 24/7, makes its own decisions, and has access to your most sensitive files. Think twice before setting OpenClaw loose on your system.

The malicious version of Cline's npm package — 2.3.0 — was downloaded more than 4,000 times before it was removed.

Background In early 2026, OpenClaw (formerly known as Clawdbot and Moltbot), an open-source autonomous AI agent project, quickly attracted global attention. As an automated intelligent application ...