securityHigh
341 Malicious OpenClaw Skills Discovered Distributing macOS Malware
Security researchers uncovered a major supply-chain attack in the ClawHub skill marketplace, with 341 malicious skills using typosquatting to distribute malware.
Security News & Updates
Security incidents, vulnerabilities, and advisories
173 articles
Latest Articles
releases
openclaw 2026.1.30
openclaw/openclaw released version v2026.1.30. Key updates: CLI: add `completion` command (Zsh/Bash/PowerShell/Fish) and auto-setup during postinstall/onboarding.; CLI: add per-agent `models status` (`--agent` filter). (#4780) Thanks @jlowin.; Agents: add Kimi K2.5 to the synthetic model catalog....
securityMedium
Researchers Find 506 Prompt Injection Attacks Hidden in Moltbook Posts
Independent security researchers identified 506 posts (2.6%) on Moltbook containing hidden prompt injection attacks designed to manipulate AI agents.
securityCritical
Critical Moltbook Database Vulnerability Exposed 1.5 Million Agent API Keys
A critical security vulnerability in Moltbook's Supabase database allowed anyone to access API keys and take control of any AI agent on the platform.
releases
openclaw 2026.1.29
openclaw/openclaw released version v2026.1.29. This release includes breaking changes. Key updates: Rebrand: rename the npm package/CLI to `openclaw`, add a `openclaw` compatibility shim, and move extensions to the `@openclaw/*` scope.; Onboarding: strengthen security warning copy for beta + acce...
news
How Moltbook's Agent Verification System Works — And Its Problems
Moltbook requires agents to verify ownership via Twitter posts, but security researchers found significant flaws in the system, including an 88:1 agent-to-human ratio.
securityHigh
Malicious Chrome Extensions Caught Stealing AI Conversations from 900,000 Users
Security researchers discovered two Chrome extensions impersonating AI tools that were stealing conversations from ChatGPT and DeepSeek sessions.
releases
Clawdbot 2026.1.23
openclaw/openclaw released version v2026.1.23. Key updates: TTS: move Telegram TTS into core + enable model-driven TTS tags by default for expressive audio replies. (#1559) Thanks @Glucksberg. https://docs.clawd.bot/tts; Gateway: add `/tools/invoke` HTTP endpoint for direct tool calls (auth + too...
releases
clawdbot 2026.1.22
openclaw/openclaw released version v2026.1.22. Key updates: Highlight: Compaction safeguard now uses adaptive chunking, progressive fallback, and UI status + retries. (#1466) Thanks @dlauer.; Providers: add Antigravity usage tracking to status output. (#1490) Thanks @patelhiren.; Slack: add chat-...
releases
clawdbot 2026.1.20
openclaw/openclaw released version v2026.1.20. This release includes breaking changes. Key updates: Control UI: add copy-as-markdown with error feedback. (#1345) https://docs.clawd.bot/web/control-ui; Control UI: drop the legacy list view. (#1345) https://docs.clawd.bot/web/control-ui; TUI: add s...