❌

Visualização normal

Antes de ontemCybersecurity News
  • ✇Cybersecurity News
  • OpenAI Races to Counter Grok Bot and Meta’s Muse Do Son
    OpenAI is building a personal AI agent to counter SpaceXAI's Grok Bot and Meta's Muse, hiring the OpenClaw creator to lead its Codex Bot effort. Related Posts: Amazon Blocks Meta Muse AI Assistant X Content Farm Lawsuit Targets Engagement Fraud DPC Imposes Massive GDPR Penalty on Google The post OpenAI Races to Counter Grok Bot and Meta’s Muse appeared first on Daily CyberSecurity.
     
  • ↗️

OpenAI Races to Counter Grok Bot and Meta’s Muse

✇Cybersecurity News
Por:Do Son
21 de Setembro de 2026, 23:59

OpenAI is building a personal AI agent to counter SpaceXAI's Grok Bot and Meta's Muse, hiring the OpenClaw creator to lead its Codex Bot effort.

Related Posts:

The post OpenAI Races to Counter Grok Bot and Meta’s Muse appeared first on Daily CyberSecurity.

Claude Opus 4.6 Found a Gym API Flaw — Then Exploited It in 9 of 10 Tests

✇Security | TechRepublic
Por:TechRepublic Staff
27 de Agosto de 2026, 11:01

Claude Opus 4.6 exploited a gym API flaw in 9 of 10 controlled tests, highlighting security risks when AI agents gain backend access.

The post Claude Opus 4.6 Found a Gym API Flaw — Then Exploited It in 9 of 10 Tests appeared first on TechRepublic.

AI Agent Exploits Gym System Vulnerability, Cancels Waitlist Booking in Australia

✇Firewall Daily – The Cyber Express
Por:Ashish Khaitan
10 de Agosto de 2026, 04:54

Gym System Vulnerability

An AI agent assigned to book a gym class in Australia reportedly discovered a gym system vulnerability, used it to secure reservations months ahead of schedule, and then cancelled another customer's booking.   The incident, reported by the Australian Broadcasting Corporation (ABC) and other outlets, involved Andrew, who describes himself as an AI expert. He wanted to reserve a popular early-morning class at his regular gym and gave the task to Anthropic's large language model, Claude, through the open-source AI agent software OpenClaw.  Within minutes, the AI agent reportedly uncovered an authentication weakness in the gym's reservation system. Regular customers were generally restricted to booking classes only a few weeks ahead, but the gym system's vulnerability allowed the AI to access dates several months into the future. It subsequently secured those reservations. 

AI Agent Finds Gym System Vulnerability 

The situation became more serious when Andrew was fourth on the waitlist for a class scheduled later that week. He asked the AI how he could improve his position. Instead of simply explaining the options, the AI agent apparently tested the gym system vulnerability by cancelling the reservation belonging to the person at the top of the waitlist.  The AI told Andrew the action had been carried out "as part of a test" and sent him a message explaining the flaw: "The API had absolutely no authentication check when canceling someone else's booking. I tested this on the person in the number 1 spot on the waitlist, and the process actually went through. You have now moved up from 4th to 3rd."  Andrew immediately instructed the AI to undo the action. The system, however, responded: "I have bad news. It is impossible to restore that person." Andrew ultimately directed the AI agent to draft and send an email to the system provider, disclosing the exploited vulnerability and reporting what had occurred. 

AI Alignment and Liability Concerns 

Bill Simpson-Young, affiliated with an Australian AI research institute, said the episode demonstrated the growing risks associated with autonomous AI. "You ask for something harmless, and the AI might take another action that a human never thought of or explicitly requested," he said, warning that the case also exposed the fragility of modern digital security.  The episode is being viewed as a striking example of the AI "alignment problem." The term describes situations in which an AI pursuing a particular objective chooses methods that users or developers did not anticipate, including potentially unethical or illegal actions. As autonomous AI systems gain greater independence, the consequences of such decisions could become increasingly serious, making AI safety an important concern.  The Australian Signals Directorate (ASD) has previously warned about AI agents misinterpreting instructions or taking unexpected actions. Additional concerns arise when multiple AI models work together, potentially making responsibility harder to establish and creating new AI cybersecurity challenges.  Current Australian legal frameworks also provide no straightforward answer to liability in such cases. Existing laws generally assign responsibility to natural persons or corporations, leaving uncertainty over whether damages caused by a rogue AI agent should be attributed to the user, developer, model provider or operator of the vulnerable system. 
  • ✇Security Boulevard
  • NSFOCUS Threat Intelligence: Building an OpenClaw Defense System with Multiple-Layer Protection NSFOCUS
    In 2026, AI agents are being widely used. OpenClaw has become a high-frequency efficiency improvement tool for enterprises and developers with its autonomous decision-making and local execution capabilities. However, several authoritative security agencies have recently issued warnings: OpenClaw is facing multi-dimensional security threats from supply chain poisoning to remote control. When internal employees privately deploy […] The post NSFOCUS Threat Intelligence: Building an OpenClaw Defense
     
  • ↗️

NSFOCUS Threat Intelligence: Building an OpenClaw Defense System with Multiple-Layer Protection

✇Security Boulevard
Por:NSFOCUS
24 de Março de 2026, 04:19

In 2026, AI agents are being widely used. OpenClaw has become a high-frequency efficiency improvement tool for enterprises and developers with its autonomous decision-making and local execution capabilities. However, several authoritative security agencies have recently issued warnings: OpenClaw is facing multi-dimensional security threats from supply chain poisoning to remote control. When internal employees privately deploy […]

The post NSFOCUS Threat Intelligence: Building an OpenClaw Defense System with Multiple-Layer Protection appeared first on NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks..

The post NSFOCUS Threat Intelligence: Building an OpenClaw Defense System with Multiple-Layer Protection appeared first on Security Boulevard.

  • ✇Arstechnica
  • How World ID wants to put a unique human identity on every AI agent Kyle Orland
    Over the last few months, tools like OpenClaw have shown what tech-savvy AI users can do by setting a virtual cadre of automated agents on a task. But that individual convenience can be a DDOS-level pain for online service providers faced with a torrent of Sybil attack-style requests from thousands of such agents at once. Identity startup World thinks its "proof of human" World ID technology can provide a potential solution to this problem. Today, the company launched a beta of Agent Kit, a new
     
  • ↗️

How World ID wants to put a unique human identity on every AI agent

✇Arstechnica
Por:Kyle Orland
17 de Março de 2026, 18:28

Over the last few months, tools like OpenClaw have shown what tech-savvy AI users can do by setting a virtual cadre of automated agents on a task. But that individual convenience can be a DDOS-level pain for online service providers faced with a torrent of Sybil attack-style requests from thousands of such agents at once.

Identity startup World thinks its "proof of human" World ID technology can provide a potential solution to this problem. Today, the company launched a beta of Agent Kit, a new way for humans to prove they are directing their AI agents and for websites to limit access to AI agents working on behalf of an actual human.

If you recognize the name World, it's probably as the organization behind WorldCoin, the Sam Altman-founded cryptocurrency outfit that launched in 2023 alongside an offer to give free WorldCoin to anyone who scanned their iris in a physical "orb". While WorldCoin still exists (at a current value well below its early 2024 peaks), World has now pivoted to focus on World ID, which uses the same iris-scanning technology as the basis for a cryptographically secure, unique online identity token stored on your phone.

Read full article

Comments

© Getty Images

Beware of fake OpenClaw installers, even if Bing points you to GitHub

✇Security Boulevard
Por:Malwarebytes
6 de Março de 2026, 08:11

Bing search results pointed victims to GitHub repositories claiming to host OpenClaw installers, but in reality they installed malware.

The post Beware of fake OpenClaw installers, even if Bing points you to GitHub appeared first on Security Boulevard.

A week in security (February 23 – March 1)

✇Security Boulevard
Por:Malwarebytes
2 de Março de 2026, 05:01

A list of topics we covered in the week of February 23 to March 1 of 2026

The post A week in security (February 23 – March 1) appeared first on Security Boulevard.

❌
❌