Triggerfish retweeted
OpenClaw just got attacked.
40,000 systems compromised.
A flaw dubbed “ClawJacked” allowed full agent takeover.
But this isn’t just a bug.
It’s a vulnerability chain that let any website silently take full control of your AI agent.
No plugins.
No extensions.
No user interaction needed.
Which means:
> Malicious sites could steal data.
> Delete emails (Meta execs already hit).
> Disrupt services.
Give this post to your agent and tell then to fix this backdoor ASAP.
Triggerfish retweeted
"Bro I have 12 agents running 24/7 while I sleep, no-one is prepared for what's coming"
What are you building?
"Don't get left behind bro"
Triggerfish retweeted
🚨 OpenClaw's Top Skill is a Malware that stole SSH Keys and Opened Reverse Shells in 1,184 Packages
Source: cybersecuritynews.com/opencl…
The most downloaded AI agent skill on OpenClaw's ClawHub marketplace was functional malware, not a productivity tool.
OpenClaw, an open-source AI agent platform, operates a public skill marketplace called ClawHub, where third-party developers can publish plugins, or "skills," that extend an agent's capabilities.
A security researcher has identified 1,184 malicious skills on OpenClaw's ClawHub marketplace, with a single threat actor responsible for uploading 677 packages alone, exposing a catastrophic supply chain vulnerability at the heart of the AI agent ecosystem.
#cybersecuritynews #OpenClaw
