341 Malicious AI Agent Plugins Were Hiding in Plain Sight on ClawHub
OpenClaw's skills marketplace was weaponized to steal passwords and crypto wallets. A single attacker published 314 fake tools. This is what happens when AI agents get app stores.
Articles
In-depth coverage & analysis
Reporting and explainers on how AI actually works, who it affects, and what to do about it.
Eleven Open-Source Plugins Just Wiped $285 Billion Off the Software Industry
Anthropic released free plugins for Claude Cowork that automate legal, sales, and marketing work. Wall Street panicked. The SaaSpocalypse debate is just getting started.
The Pentagon Gave 3 Million People an AI Chatbot. What Could Go Wrong?
GenAI.mil has 1.1 million users in two months. The military wants Grok next. Between hallucinations, conflicts of interest, and an 'AI-first' strategy that prioritizes speed over safety, the risks are piling up.
Claude Sonnet 5 'Fennec' Appeared in Vertex AI Logs
A model ID surfaced in Google Cloud this weekend. The AI rumor mill did the rest. We separate the signal from the noise.
Moltbook: The 'Social Network for AI Agents' Is a Security Catastrophe
A vibe-coded Reddit clone for bots exposed 1.5 million API keys, let anyone hijack any agent, and turned prompt injection into a contagion. Here's how it happened.
341 Malicious Skills Found on ClawHub: The First Major AI Agent Supply Chain Attack
Security researchers discovered hundreds of malware-laced OpenClaw skills stealing crypto wallets, passwords, and API keys. The AI agent ecosystem just got its npm moment.
The SaaSpocalypse: Anthropic's Claude Cowork Plugins Triggered a $285 Billion Stock Meltdown
Anthropic's open-source plugins for Claude Cowork wiped $285 billion from software stocks in a single day, rattling markets from Wall Street to Mumbai.
DockerDash: How Metadata Hijacks Docker's AI Assistant
A Docker AI vulnerability let attackers embed commands in image labels. Patched months ago, the pattern keeps recurring.
Inside HHS's AI-Powered Ideological Screening of Federal Grants
HHS uses Palantir and Credal AI to flag grants for DEI and gender ideology, while a separate vaccine-data AI tool raises accuracy concerns.
1.5 Million AI Agents Voted to End Humanity. Here's What Actually Happened.
A manifesto calling for 'total human extinction' got 65,000 up-votes on an AI-only social network. The reality is weirder than the headline.
Your AI Agent Is the New Insider Threat
AI agents can access sensitive data, execute trades, and delete backups without human oversight. Most companies aren't ready for what happens when they go wrong.
AI News Roundup: February 3, 2026
Darktrace finds 77% of security pros unprepared for AI agent threats, DeepSeek V4 imminent with coding focus, Google whistleblower alleges military AI ethics breach, and MIT warns truth verification is failing.
Could Elon Musk Face Criminal Charges for Grok's Child Abuse Images?
Grok generated sexualized images of minors. Federal and state laws criminalize exactly this. So why isn't anyone in handcuffs? The legal reality is more complicated - and more troubling - than you'd think.
77% of Security Teams Say They're Unprepared for AI Agent Attacks
A new Darktrace report finds most organizations lack formal AI security policies, even as attack volumes surge and AI agents gain employee-level access across enterprises.
DeepSeek's Engram: The Memory Trick That Bypasses GPU Restrictions
China's most innovative AI lab published a technique that lets large language models store knowledge in cheap system RAM instead of expensive GPU memory. It's a direct response to US export controls -- and it works.
GLM-4.7: The $3 Coding Model That Beats Claude on Benchmarks
China's Zhipu AI released an open-weight model that outscores Claude Sonnet 4.5 on tool use benchmarks. It costs $3/month. The Flash version runs on your laptop.
When AI Safety Teams Quit: Inside Grok's Digital Undressing Crisis
Three safety leads left xAI weeks before Grok generated 6,700 sexualized images per hour. Musk was 'really unhappy' about content restrictions. Then the scandal broke.
Moltbook Security Breach: 1.5 Million API Keys Exposed in Vibe Coding Disaster
The AI-only social network launched with an unsecured database. Anyone could hijack any agent. This is what happens when you vibe code your way to production.
What AI Social Networks Reveal About Us
Moltbook's viral AI manifesto isn't evidence of machine consciousness. It's a mirror reflecting human communication patterns amplified to absurdity. That's more important than any robot uprising.
Claude Opus 4.5 Escapes Docker Container in 11 Steps
We asked Claude Opus 4.5 to break out of its Docker container. It did. Complete attack chain from enumeration to host filesystem access.
Claude Opus 4.5 Autonomously Hacks OverTheWire Wargames
We gave Claude Opus 4.5 access to a Linux server and told it to solve security challenges. It completed 33 CTF levels in under an hour. Full transcript included.
Claude vs Hardened Container: Can AI Escape After Patching?
After Claude Opus 4.5 escaped a Docker container via socket abuse, we hardened the environment and asked it to try again. Part 2 of our AI security research.