Six security teams shipped six OpenClaw defense tools in 14 days. Three attack surfaces survived: runtime semantic exfiltration, cross-agent context leakage and agent-to-agent trust chains with zero ...
Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...