Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
GHSA-hjr6-g723-hmfm: OpenClaw WhatsApp-to-Host Attack Chain – Detection and Remediation
Introduction A critical attack surface has emerged at the intersection of personal AI assistants and instant messaging. Recent research has ...
OpenClaw AI Agent Exploitation: Detection and Mitigation of Indirect Prompt Injection
Introduction This week, the security community was alerted to a critical class of vulnerabilities affecting OpenClaw, a widely deployed self...
Claw Chain: OpenClaw Vulnerabilities Enable Data Theft, Privilege Escalation, and Persistence — Detection and Hardening Guide
Claw Chain: OpenClaw Vulnerabilities Enable Data Theft, Privilege Escalation, and Persistence — Detection and Hardening Guide Introduction C...
Remus Stealer, ClickFix macOS Infostealers, and Malicious OpenClaw Skills: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Recent OTX pulses highlight a surge in criminally motivated campaigns utilizing evolving social engineering and supply chain ...
Remcos RAT, Remus Stealer & macOS ClickFix: OTX Pulse Analysis — Enterprise Detection Pack
Intelligence Briefing: Remcos RAT, Remus Stealer & macOS ClickFix Threat Summary Recent OTX pulses indicate a surge in diverse, high-evasion...
ClickFix macOS Lures, Remus Stealer, & OpenClaw RAT Supply Chain: OTX Pulse Analysis
Threat Summary Current OTX pulses indicate a convergence of sophisticated delivery mechanisms and evasive infostealers. Threat actors are ac...
CNCERT Warning: OpenClaw AI Agent Defaults Enable Critical Prompt Injection Attacks
The Rise of Autonomous Agents Brings New Risks As organizations rush to integrate autonomous AI agents into their workflows, the security im...
OpenClaw Vulnerability Exposes AI Agents to RCE: Hunt, Detect, and Mitigate
The rapid integration of Artificial Intelligence into development workflows has revolutionized productivity, but it has also opened a Pandor...
Hijacking Local AI: Inside the ClawJacked WebSocket Vulnerability
The rapid adoption of Artificial Intelligence in development and operational workflows has introduced a new attack surface that many organiz...