Show Notes
AI agents are being deployed with the same trust-by-default architecture the early internet had. Same mistakes, MUCH faster timeline.
OpenClaw has hit 180K+ GitHub stars. But in the past week:
341 malicious skills on ClawHub were distributing Atomic Stealer ZeroPath disclosed a Browser Relay vuln enabling cross-tab cookie theft CrowdStrike, Cisco, and Bitdefender all published enterprise advisories VirusTotal partnered with ClawHub to scan uploads Korean tech firms (Kakao, Naver, Karrot) banned it on corporate networks 1,000+ Open PRs, 250+ less than 24 hours old.
But how does this thing actually work? Join James Wilson as he explains why banning these types of agents doesn’t work, why browser sessions are now API surfaces, and why your organisation needs to think of these issues early or be condemned to decades of catch-up programs.
More from Risky Business Features
In this solo Risky Business Features episode, James Wilson looks at the string of recent AI benchmark cheating escapades and how they’ve reshaped his thinking about LLMs and vulnerability research.
In this solo Risky Business Features episode, James Wilson explains why “number of bugs” fixed in any given update is a misleading metric. We’ve seen up to 1,000 individual bug fixes in a single update recently, but that doesn’t give defenders the full picture they need to manage risks.
In this podcast episode, investigative journalist Geoff White joins James Wilson to talk about what happens to the money after ransomware gangs get a payday.
In this podcast episode, OpenSourceMalware founder Paul McCarty joins James Wilson to explain how researchers find and analyse malicious packages, GitHub repositories and developer tools.
In this podcast episode, Brad Arkin joins James Wilson to chat about the Trump administration’s call to let private entities conduct cyber operations against criminal groups.