A fake Go module posing as golang.org/x/crypto captures terminal passwords, installs SSH persistence, and delivers the ...

OpenClaw patches ClawJacked flaw, log poisoning bug, and multiple CVEs as 71 malicious ClawHub skills spread malware and ...

Oasis Security, the identity security platform, today released new threat research exploring a vulnerability chain in OpenClaw that allows any website to silently take full control of a developer's AI ...

The vulnerability of the “connective tissue” of the AI ecosystem — the Model Context Protocol and other tools that let AI agents communicate — “has created a vast and often unmonitored attack surface” ...

AI agents are powerful, but without a strong control plane and hard guardrails, they’re just one bad decision away from chaos.

Your cloud isn’t at risk because it’s fast; it’s at risk because thousands of invisible machine identities outlive your control.

The OpenClaw developer recently announced this partnership in a blog post. OpenClaw is a particularly powerful AI assistant that, depending on its configuration, has extensive system privileges, uses ...

StealC malware campaign exploits fake CAPTCHA pages to steal sensitive data while blending into normal system activity.

A malicious NPM package, ambar-src, mimicking a popular JavaScript framework, was downloaded nearly 50,000 times in a few ...