OpenClaw
In 13 briefs, most recently 11 July 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Coverage in DanSec Daily
- ShareFile customers told to shut down storage controllers after an external threat; WP-SHELLSTORM backdoors thousands of WordPress sites; Zimbra critical flaw.
- Operation Endgame disrupts Amadey botnet and Stealc infostealer; Cisco Catalyst SD-WAN zero-day exploited for two months; Chrome 149 patches 18 flaws.
- Grafana source code theft, the ShinyHunters-linked 7-Eleven breach, and an unpatched zero-day in Microsoft Exchange under active exploitation.
- Shai-Hulud worm source leak and TanStack supply chain breach at OpenAI, Exchange zero-day CVE-2026-42897, and JDownloader installer hijack.
- AppsFlyer Web SDK supply-chain hijack stealing crypto, GlassWorm abusing 72 Open VSX extensions, and OpenClaw AI agent flaws.
- The Oracle E-Business Suite breach at Madison Square Garden, APT28's MSHTML zero-day CVE-2026-21513, and North Korea's Contagious Interview npm campaign.
- Mexican government breach via AI-generated exploits, the ClawJacked flaw in the OpenClaw AI agent, and Samsung's Texas smart TV data settlement.
- Canadian Tire breach hits 38M accounts, South Korea tax office leaks crypto wallet phrase ($4.8M stolen), and Kimwolf botnet botmaster identified as Dort.
- French FICOBA bank registry access exposing 1.2M accounts, Figure breach by ShinyHunters, and Ivanti zero-day exploitation surge.
- BridgePay ransomware outage, Moltbook exposing real users' personal data, and state-aligned TGR-STA-1030/UNC6619 espionage across 155 countries.
- Flickr third-party email breach, SmarterMail RCE (CVE-2026-24423) exploited in ransomware, and TGR-STA-1030 espionage across 37 countries.
- Notepad++ supply chain attack, ShinyHunters' Panera Bread leak of 5.1M records, and actively exploited SolarWinds Web Help Desk RCE added to CISA KEV.
- Lotus Blossom hijacks Notepad++ update channel, Panera Bread breach exposes 5.1M accounts, and 341 malicious OpenClaw AI skills found.