The phishing campaign lures OpenClaw developers with fake $5,000 token airdrops, then drains wallets through a cloned site ...

Distributed through over 100 GitHub repositories, the BoryptGrab stealer targets browser, wallet, system, and other user data ...

Fake OpenClaw installers hosted in GitHub repositories and promoted by Microsoft Bing's AI-enhanced search feature instructed users to run commands that deployed information stealers and proxy malware ...

Attackers operated an active C2 implant for up to a week and compromised AppSec vendor Xygeni's xygeni/xygeni-action in that time.

For agents, the value is clearer still: structured JSON output, reusable commands and built-in skills that let models ...

The infamous GlassWorm malware has infected dozens more Open VSX software packages, according to new research.

With NemoClaw, Nvidia wants to be the infrastructure beneath every AI agent5. OpenClaw gets enterprise-grade security as ...

OpenClaw's popularity is proving to be a great vessel for malware distribution, especially when it's advertised via Bing.

The terminal can now handle entire workflows ...

Hackers are using malvertising campaigns to disguise infostealers as AI tools.

Command Palette is getting a big upgrade, and it may finally turn it into the app launcher everyone should use on Windows.

ClickFix, the malware delivery method behind these attacks, requires no technical exploits — just your trust, a copied ...