Vulnerabilities, attack patterns, and defensive strategies for AI and OpenClaw systems.
Research across 135,000 publicly exposed OpenClaw instances found nearly two-thirds have no authentication layer, making the critical April CVEs remotely exploitable with zero credentials.
Source: BlinkThe device pairing flow failed to validate scope before granting operator-level sessions, allowing any paired device to escalate to full admin access. Thirteen vulnerabilities patched in a single month - rare for the project.
Source: BlinkThe UK's AI Security Institute independently tested Mythos Preview and confirmed it can execute multi-stage corporate network attacks — 32 steps from reconnaissance to full takeover — that would take human professionals days. It's the first model to complete their full simulated attack.
Source: AISI (UK Gov)A step-by-step walkthrough for deploying OpenClaw inside Docker with least-privilege principles, treating the container as a sandbox for credential isolation. Covers file permissions, network restrictions, and secret mounting.
Source: AIMLAPISecurity researchers documented EchoLeak, ForcedLeak, GeminiJack, and three other critical flaws across major enterprise AI platforms. All exploited the same architectural gaps: untrusted input, broad data access, and missing per-operation controls.
Source: KiteworksMicrosoft documented a phishing campaign using AI-generated lures and dynamic device code generation to bypass OAuth's 15-minute expiration window. Attackers blended traffic through Vercel and Cloudflare Workers.
Source: Microsoft Security BlogSecurity firm Reco found that 341 out of roughly 13,700 community-built skills on ClawHub contained malicious payloads — including prompt injections, hidden malware, and unsafe data handling patterns.
Source: Geek MetaverseThe European Commission published guidance on the EU AI Act's open-source exemption, clarifying which open-weight models qualify for lighter regulatory treatment. Models under 10B parameters released under open-source licenses are exempt from most compliance requirements. The guidance also clarifies that self-hosting open models for internal use falls under different rules than distributing them commercially.
Source: European CommissionMicrosoft published a detailed blueprint for running security operations with AI agents. The model has two layers: automated defenses that block known threats in seconds, and AI agents that handle investigation and triage while humans focus on judgment calls and strategy.
Source: Microsoft Security BlogA university study found that AI agent frameworks like OpenClaw dramatically amplify attack risk. While a bare model might refuse to help, an agent with tool access can be manipulated into full attack chains with high success rates.
Source: Geek MetaverseThe $10B AI startup serving Anthropic, OpenAI, and Meta was hit through a supply-chain attack on LiteLLM — a popular open-source library. The breach potentially exposed customer data and details about AI projects.
Source: FortuneAnthropic announced Project Glasswing, a security initiative with AWS, Apple, Google, Microsoft, NVIDIA, Cisco, CrowdStrike, Palo Alto Networks and others to use its unreleased Claude Mythos Preview model for defensive cyber work. The company said the model has already found thousands of high-severity and zero-day vulnerabilities across major operating systems and browsers, and that it will share findings with partners and the broader industry.
Source: Anthropic NewsA study found the majority of code written by AI assistants contains security vulnerabilities, with prompt injection being the top threat in deployed LLM systems. The findings challenge the growing "just vibe code it" trend.
Source: MultipleAll OpenClaw instances older than v2026.4.5 are vulnerable to arbitrary code execution through crafted .npmrc files. The attack requires no authentication and can be triggered remotely.
Source: BlinkResearchers warned that agent frameworks running shell commands — including OpenClaw — are vulnerable to prompt injection and supply chain attacks via malicious "skills." Hardened forks like NanoClaw emerged, isolating agents in Docker containers.
Source: devFlokersAWS Security Agent now offers on-demand penetration testing across AWS, Azure, GCP, and on-premises environments. The service combines SAST, DAST, and pen testing to validate vulnerabilities and generate remediation pull requests.
Source: AWS Security Blog