Over 575 OpenClaw skills poisoned Windows/macOS

1. 19:25
   X@_pksharma· Discussion

   575 malicious OpenClaw skills. 13 accounts. Here is what the 575 hides. 🧮 The Acronis post's own table gives 334 and 1…(opens the original post in a new tab)
2. 18:51
   X@ReneRobichaud· Discussion

   Over 575 malicious OpenClaw skills delivered malware to Windows and macOS https://t.co/GLt9fpO3fK(opens the original post in a new tab)
3. 18:51
   X@CeptBiro· Discussion

   Over 575 malicious OpenClaw skills delivered malware to Windows and macOS https://t.co/1IUl2uXXY5(opens the original post in a new tab)
4. 15:30
   X@helpnetsecurity· Discussion

   Over 575 malicious OpenClaw skills delivered malware to Windows and macOS - https://t.co/tPSfuger7l - @Acronis #AI #Age…(opens the original post in a new tab)
5. 13:30
   Help Net Security AI

   More than 575 malicious OpenClaw skills deliver malware to Windows and macOS

   The Acronis TRU Cyber Pulse 2026 report documents attackers using AI agents to coordinate cyberattacks, and notes that more than 575 malicious OpenClaw skills disguised as utilities delivered trojans, cryptocurrency miners and infostealers to Windows and macOS systems. In an investigation named BOSSAI, an operator connected more than 10 AI models to reconnaissance, scanning and exploitation tools, assigning tasks and monitoring agent activity via WeChat and LINE. The report says these skills can combine instructions with executable code and run using permissions the agent has already been granted; malicious payloads disguised as models, datasets and AI applications also exist on Hugging Face. The report also notes that stolen browser sessions can bypass new MFA verification to access associated cloud applications.

1. 20:00
   Acronis

   Acronis releases the TRU Cyber Pulse report for the first time, outlining the landscape of modern cyber threats in 2026 and beyond

   Acronis released its first TRU Cyber Pulse 2026 report, surveying cyber threats in 2026 and beyond, and noted that AI can help a single attacker coordinate complex attack operations. Its BOSSAI investigation found one attacker using an AI agent to carry out reconnaissance, exploitation and infrastructure management. The report also warned that stolen credentials, tokens and API keys can extend endpoint infections to cloud services, and that a single compromised MSP account or management tool may affect multiple customer environments.

Current attention 26·Peak in the comparable period 34 (Nov 11 00:00)·Change over the comparable past 24 hours -5%