Security researchers at Oasis uncovered a high‑severity vulnerability in the popular open‑source OpenClaw AI agent. The flaw lets a malicious website open a local WebSocket connection and brute‑force the gateway password, granting full control over the system. OpenClaw’s core gateway, which handles authentication for connected nodes, is exposed to localhost and can be compromised without any plugins or prior infection. A fix was released within 24 hours, and users are urged to upgrade to version 2026.2.25 or later. Read more →

Perplexity introduced Computer, an AI agent that can assign tasks to other AI agents. Operating primarily in the cloud, the service runs within a controlled environment that limits integrations to vetted plugins. Users can supply context through files such as USER.MD, MEMORY.MD, SOUL.MD, and HEARTBEAT.MD, allowing the agent to create, modify, or delete files on the user’s system. While the design aims to temper the wild capabilities seen in tools like OpenClaw, Perplexity acknowledges that large‑language‑model errors and security concerns remain, especially when the agent works with unbacked‑up data. Read more →

Peter Steinberger, the developer behind the viral AI agent OpenClaw and now an OpenAI employee, told listeners on OpenAI’s Builders Unscripted podcast that the best way to work with modern AI is to explore, stay playful, and accept that expertise develops over time. He described his own path from a WhatsApp‑integrated tool to the OpenClaw prototype, emphasizing that AI models can solve problems without explicit programming and that learning to code with AI is a skill that improves with practice. Read more →