ClawJacked attack let malicious websites hijack OpenClaw to steal data

Security researchers have disclosed a high-severity vulnerability dubbed "ClawJacked" in the popular AI agent OpenClaw that allowed a malicious website to silently bruteforce access to a locally ...
CPO Magazine

Security Research Finds OpenClaw AI Agent “Trivially Vulnerable” to Hijacking

The Oasis researchers document a vulnerability chain that can be initiated from any website the AI agent (or its user) visits ...
The Hacker News

ClawJacked Flaw Lets Malicious Sites Hijack Local OpenClaw AI Agents via WebSocket

OpenClaw patches ClawJacked flaw, log poisoning bug, and multiple CVEs as 71 malicious ClawHub skills spread malware and ...
TechRound

Scammers Are Using Fake Google Security Checks To Steal User Passwords, Reports Find

A website styled to look like a Google Account security page is distributing what Malwarebytes describes as one of ...
Techlomedia

Critical Flaw Found in OpenClaw That Lets Any Website Take Over Your AI Agent

OpenClaw is in the news again for another serious security issue. Security researchers from Oasis Security discovered a ...