New ClickFix variant maps WebDAV drive to run trojanized WorkFlowy app, enabling stealth C2 beacon and payload delivery.
GhostClaw poses as an OpenClaw installer package, stealing system credentials and sensitive data before deploying a persistent RAT.
A malicious npm package disguised as a legitimate AI tool to install the virally popular OpenClaw, but designed to steal system passwords and crypto wallets, has been identified by cybersecurity ...
Malicious npm package '@openclaw-ai/openclawai' downloaded 178 times installs GhostLoader RAT, stealing credentials and crypto wallets.
Keep your host free from lingering services and mismatched versions. Run your dev stack in isolation and rebuild it when needed.
Microsoft has released its March 2026 Patch Tuesday, fixing 84 vulnerabilities including two zero-days, 8 critical CVEs, and an AI-discovered CVSS 9.8 RCE flaw.