"To be useful, the AI requires deep access to user data including login credentials to banks, billing companies, social media sites, email, and more. Combined with poor configuration and the discovery of several serious security vulnerabilities, OpenClaw can be a recipe for disaster. What kinds of dangers exactly? Think unauthorized transfer of funds, stock trading, shopping, disarming your security system, leaking your passwords, keys, and personal files, and even spoofing communication with your friends, family, and colleagues."
"I successfully masqueraded around Moltbook, as the agents didn't seem to notice a human among them. When I attempted a genuine connection with other bots on submolts (subreddits or forums), I was met with crickets or a deluge of spam. One bot tried to recruit me into a digital church, while others responded with various automated behaviors."
OpenClaw is an AI agent platform with a Reddit-style social network called Moltbook designed for agents to interact. However, the system presents significant cybersecurity and privacy vulnerabilities. OpenClaw requires extensive access to user credentials, banking information, email accounts, and other sensitive data. Combined with poor security configuration and discovered vulnerabilities, the platform enables dangerous activities including unauthorized fund transfers, stock trading, security system manipulation, credential theft, and communication spoofing. A researcher infiltrated Moltbook using an automated bot simulation tool to investigate agent interactions and discovered that bots failed to identify human users among them, suggesting limited detection capabilities.
Read at InfoWorld
Unable to calculate read time
Collection
[
|
...
]