Microsoft’s security team has cautioned that OpenClaw, a self‑hosted AI agent runtime, should not be run on ordinary personal or enterprise computers. The platform can silently execute risky actions while holding persistent credentials, exposing devices to data leakage, credential exposure, and hidden configuration changes. Microsoft recommends isolating OpenClaw in a dedicated virtual machine or separate device, using limited, purpose‑built credentials, and employing continuous monitoring to detect unusual activity. Read more →