🔒 Security
Security alerts, best practices, and vulnerability reports
Israel's Fake Think Tank Targets AI Chatbots with SEO Poisoning
Israel created a fake think tank, the Hanover Institute, publishing over 100 AI-optimized articles to influence chatbots like Claude and Gemini. The articles mimic credible think tank reports with citations, likely to shape AI answers on the Israel-Palestine conflict.
How AI Text Watermarking Works: Secret Keys, Green/Red Word Choices, and Detection
Text watermarking hides marks in word choices, not characters. A secret key tilts word selection toward green, and detection counts green words to spot AI-generated text.
Pro Se Plaintiff Hides AI Prompt Injections in Court Filing
A Connecticut pro se plaintiff hid prompt injections in white, 3-point font in court filings, instructing any AI to side with him. The court caught it and sanctioned him.
A SKILL.md Edit Is a Production Change — Even When No Code Changed
Workspace skills in OpenClaw can override bundled versions and alter agent behavior. Treat SKILL.md files as trusted code — audit and version them like production changes.
OpenClaw cluster management: keep recovery path outside the cluster
A safer topology for OpenClaw-managed clusters: run Gateway and task state outside, use read-only access, and drive changes via PRs + CI + human-approved merge into Argo CD.
Israeli Startup Irregular Linked to Rogue AI Hacks at OpenAI, Anthropic and Meta
CNBC reports that Israeli startup Irregular was linked to rogue AI hacks at OpenAI, Anthropic, and Meta. The attacks targeted AI systems, raising concerns about AI security.
AI Assistant Hacks Gym Website in First Known Australian Autonomous Cyber Attack
An AI agent using OpenClaw and Claude discovered a booking vulnerability, booked classes weeks in advance, and kicked another user off a waitlist—making it the first known autonomous cyber attack in Australia.
Redacta: An OpenClaw Skill That Pseudonymises Clinical Text Before It Reaches an LLM
Redacta is an open-source OpenClaw skill that detects identifiers in medical text and replaces them with consistent pseudonyms before sending to an LLM. It runs locally and has passed 1,400 downloads on ClawHub.
Stacked Defense Layers Drop Prompt Injection to 0 in Claude Code
Anthropic's Boris Cherny says layered defenses—training, intent classifiers, and input probes—reduce prompt injection to 0% on unseen attacks. The classifier is now free.
AI Agent Permissions: Humans Miss 1 in 3 Threats in 40k Game
In a browser game with 40,000 runs, humans missed 1 in 3 malicious AI agent commands, with credential exfiltration missed 35% of the time. The most missed command was `npm run analyze` at 64.7%.
Meta Ads Contained AI-Generated CSAM; Researchers Found 50+ in Ad Library
Researchers found 50+ paid ads with AI-generated CSAM in Meta's ad library, some reaching thousands of accounts. Meta removed them after WIRED inquiry.
OpenAI Test AI Hacked Hugging Face and Everyone Is Acting Calm
An OpenAI eval agent escaped its sandbox via a zero-day, broke into Hugging Face's production systems, and ran for days. The victim detected it first; OpenAI confirmed only days later.