ClawJacked Vulnerability in OpenClaw Lets Websites Hijack AI Agents

Is your AI assistant safe? Oasis Security researchers have found a critical ClawJacked vulnerability in OpenClaw that allows hackers to hijack AI agents through a simple browser tab.

Hackread – Cybersecurity News, Data Breaches, AI and More – ​Read More

5 Nations Alert: Critical Cisco Bug Used in Global Espionage Campaign

Hackers exploited a critical Cisco SD-WAN flaw, prompting a rare joint warning from the US, UK, Australia, Canada, and New Zealand.

The post 5 Nations Alert: Critical Cisco Bug Used in Global Espionage Campaign appeared first on TechRepublic.

Security Archives – TechRepublic – ​Read More

Destroyed servers and DoS attacks: What can happen when OpenClaw AI agents interact

By testing agent-to-agent interactions, researchers observed catastrophic system failures. Here’s why that’s bad news for everyone.

Latest news – ​Read More

In Other News: ATT&CK Advisory Council, Russian Cyberattacks Aid Missile Strikes, Predator Bypasses iOS Indicators

Other noteworthy stories that might have slipped under the radar: cyber valuations surge, OpenAI disrupts malicious AI use, ShinyHunters claims Odido breach.

The post In Other News: ATT&CK Advisory Council, Russian Cyberattacks Aid Missile Strikes, Predator Bypasses iOS Indicators appeared first on SecurityWeek.

SecurityWeek – ​Read More

CISA replaces acting director after a bumbling year on the job

The U.S. cybersecurity agency’s acting director Madhu Gottumukkala will be replaced, after a year of cuts, layoffs, and staff reassignments, and allegations of security lapses and claims he struggled to lead the agency.

Security News | TechCrunch – ​Read More

What to expect at MWC 2026: Best phones I’m anticipating from Xiaomi, Motorola, and more

Mobile World Congress 2026 kicks off next week, but Samsung, Nothing, TCL, and others have already hinted at what’s to come in Barcelona.

Latest news – ​Read More

38 Million Allegedly Impacted by ManoMano Data Breach

Hackers stole personal information such as names, email addresses, phone numbers, and other information.

The post 38 Million Allegedly Impacted by ManoMano Data Breach appeared first on SecurityWeek.

SecurityWeek – ​Read More

Claude Code Security Shows Promise, Not Perfection

Claude Code’s introduction rippled across the stock market, but researchers and analysts say its impact was overstated, as they peel back the layers.

darkreading – ​Read More

Chilean Carding Shop Operator Extradited to US

The 24-year-old suspect has been accused of trafficking over 26,000 cards from a single brand.

The post Chilean Carding Shop Operator Extradited to US appeared first on SecurityWeek.

SecurityWeek – ​Read More

ScarCruft Uses Zoho WorkDrive and USB Malware to Breach Air-Gapped Networks

The North Korean threat actor known as ScarCruft has been attributed to a fresh set of tools, including a backdoor that uses Zoho WorkDrive for command-and-control (C2) communications to fetch more payloads and an implant that uses removable media to relay commands and breach air-gapped networks.
The campaign, codenamed Ruby Jumper by Zscaler ThreatLabz, involves the deployment of malware

The Hacker News – ​Read More