HalluSquatting Attack Exploits AI Coding Assistants to Deliver Botnet Malware
Researchers from Tel Aviv University, Technion, and Intuit have identified a novel attack vector called HalluSquatting that exploits AI coding assistants' tendency…
Tag: OpenClaw
SkillCloak Technique Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing
Researchers at the Hong Kong University of Science and Technology have developed a technique called SkillCloak that allows malicious AI agent skills…
OpenClaw Vulnerability Allows Full Agent Control
OpenClaw has a vulnerability that allows any website to take full control of a developer's AI agent via WebSocket connections to localhost.
OpenClaw: Open-Source Autonomous Assistant
OpenClaw, formerly Clawdbot and Moltbot, is an open-source autonomous assistant used in mind virus experiments. Its default soul file was exploited in…
OpenClaw AI Agent Vulnerable to Code Execution and Data Exfiltration via Hidden Commands and Phishing
Two security teams have demonstrated that OpenClaw, a popular self-hosted AI agent, can be tricked into executing attacker-controlled code or leaking sensitive…