{"id":21241,"date":"2026-02-12T18:26:02","date_gmt":"2026-02-12T18:26:02","guid":{"rendered":"https:\/\/microvibenews.com\/?p=21241"},"modified":"2026-02-12T18:26:02","modified_gmt":"2026-02-12T18:26:02","slug":"why-openclaw-the-open-source-ai-agent-has-security-experts-on-edge","status":"publish","type":"post","link":"https:\/\/microvibenews.com\/?p=21241","title":{"rendered":"Why OpenClaw, the open-source AI agent, has security experts on edge"},"content":{"rendered":"<p><img src=\"https:\/\/fortune.com\/img-assets\/wp-content\/uploads\/2026\/02\/GettyImages-2259515289-e1770916900864.jpg?w=2048\" \/><\/p>\n<p><em>Welcome to Eye on AI, with AI reporter Sharon Goldman. In this edition: The wild side of OpenClaw\u2026Anthropic\u2019s new $20 million super PAC counters OpenAI\u2026OpenAI releases its first model designed for super-fast output\u2026Anthropic will cover electricity price increases from its AI data centers\u2026Isomorphic Labs says it has unlocked a new biological frontier beyond AlphaFold.<\/em><\/p>\n<div>\n<p>OpenClaw has spent the past few weeks showing just how reckless AI agents can get \u2014 and attracting a devoted following in the process.<\/p>\n<p>The free, open-source autonomous artificial intelligence agent, developed by Peter Steinberger and originally known as ClawdBot, takes the chatbots we know and love \u2014 like ChatGPT and Claude \u2014 and gives them the tools and autonomy to interact directly with your computer and others across the internet. Think sending emails, reading your messages, ordering tickets for a concert, making restaurant reservations, and much more \u2014 presumably while you sit back and eat bonbons.<\/p>\n<p>The problem with giving OpenClaw extraordinary power to do cool things? Not surprisingly, it\u2019s the fact that it also gives it plenty of opportunity to do things it shouldn\u2019t, including leaking data, executing unintended commands, or being quietly hijacked by attackers, either through malware or through so-called \u201cprompt injection\u201d attacks. (Where someone includes malicious instructions for the AI agent in data that an AI agent might use.)<\/p>\n<p>The excitement about OpenClaw, say two cybersecurity experts I spoke to this week, is that it has no restrictions, basically giving users largely unfettered power to customize it however they want.<\/p>\n<p>\u201cThe only rule is that it has no rules,\u201d said Ben Seri, cofounder and CTO at Zafran Security, which specializes in providing threat exposure management to enterprise companies. \u201cThat\u2019s part of the game.\u201d But that game can turn into a security nightmare, since rules and boundaries are at the heart of keeping hackers and leaks at bay.<\/p>\n<h2 class=\"wp-block-heading\">Classic security concerns<\/h2>\n<p>The security concerns are pretty classic ones, said Colin Shea-Blymyer, a research fellow at Georgetown\u2019s Center for Security and Emerging Technology (CSET), where he works on the CyberAI Project. Permission misconfigurations \u2014 who or what is allowed to do what \u2014 mean humans could accidentally give OpenClaw more authority than they realize, and attackers can take advantage.<\/p>\n<p>For example, in OpenClaw, much of the risk comes from what developers call \u201cskills,\u201d which are essentially apps or plugins the AI agent can use to take actions \u2014 like accessing files, browsing the web, or running commands. The difference is that, unlike a normal app, OpenClaw decides on its own when to use these skills and how to chain them together, meaning a small permission mistake can quickly snowball into something far more serious.<\/p>\n<p>\u201cImagine using it to access the reservation page for a restaurant and it also having access to your calendar with all sorts of personal information,\u201d he said. \u201cOr what if it\u2019s malware and it finds the wrong page and installs a virus?\u201d<\/p>\n<p>OpenClaw does have security pages in its documentation and is trying to keep users alert and aware, Shea-Blymyer said. But the security issues remain complex technical problems that most average users are unlikely to fully understand. And while OpenClaw\u2019s developers may work hard to fix vulnerabilities, they can\u2019t easily solve the underlying issue of the agent being able to act on its own \u2014 which is what makes the system so compelling in the first place.<\/p>\n<p>\u201cThat\u2019s the fundamental tension in these kinds of systems,\u201d he said. \u201cThe more access you give them, the more fun and interesting they\u2019re going to be \u2014 but also the more dangerous.\u201d<\/p>\n<h2 class=\"wp-block-heading\">Enterprise companies will be slow to adopt <\/h2>\n<p>Zafran Security\u2019s Seri admitted that there is little chance of squashing user curiosity when it comes to a system like OpenClaw, though he emphasized that enterprise companies will be much slower to adopt such an uncontrollable, insecure system. For the average user, he said, they should experiment as though they were working in a chemistry lab with a highly explosive material.<\/p>\n<p>Shea-Blymyer pointed out that it\u2019s a positive thing that OpenClaw is happening first at the hobbyist level. \u201cWe will learn a lot about the ecosystem before anybody tries it at an enterprise level,\u201d he said. \u201cAI systems can fail in ways we can\u2019t even imagine,\u201d he explained. \u201c[OpenClaw] could give us a lot of info about why different LLMs behave the way they do and about newer security concerns.\u201d<\/p>\n<p>But while OpenClaw may be a hobbyist experiment today, security experts see it as a preview of the kinds of autonomous systems enterprises will eventually feel pressure to deploy.<\/p>\n<p>For now, unless someone wants to be the subject of security research, the average user might want to stay away from OpenClaw, said Shea-Blymyer. Otherwise, don\u2019t be surprised if your personal AI agent assistant wanders into very unfriendly territory.<\/p>\n<p>With that, here\u2019s more AI news.<\/p>\n<p><strong>Sharon Goldman<\/strong><br \/>sharon.goldman@fortune.com <br \/>@sharongoldman<\/p>\n<h3>FORTUNE ON AI<\/h3>\n<p class=\"font-bold font-inria-serif typography-level-1\" data-cy=\"article-title\">The CEO of Capgemini has a warning. You might be thinking about AI all wrong <span style=\"font-weight:400\">\u2013 by Kamal Ahmed<\/span><\/p>\n<p class=\"font-bold font-inria-serif typography-level-1\" data-cy=\"article-title\">Google\u2019s Nobel-winning AI leader sees a \u2018renaissance\u2019 ahead\u2014after a 10- or 15-year shakeout <span style=\"font-weight:400\">\u2013 by Nick Lichtenberg<\/span><\/p>\n<p><span style=\"font-weight:400\">X-odus: Half of xAI\u2019s founding team has left Elon Musk\u2019s AI company, potentially complicating his plans for a blockbuster SpaceX IPO<\/span><span style=\"font-weight:400\"> \u2013 by Beatrice Nolan<\/span><\/p>\n<p><span style=\"font-weight:400\">OpenAI disputes watchdog\u2019s claim it violated California\u2019s new AI safety law with latest model release<\/span><span style=\"font-weight:400\"> \u2013 by Beatrice Nolan<\/span><\/p>\n<h3>AI IN THE NEWS<\/h3>\n<p id=\"link-43f17025\" class=\"css-88wicj e1h9rw200\" data-testid=\"headline\"><strong>Anthropic&#8217;s new $20 million super PAC counters OpenAI.\u00a0<\/strong>According to the New York Times, Anthropic has pledged $20 million to a super PAC operation designed to back candidates who favor stronger AI safety and regulation, setting up a direct clash ahead of the midterm elections. The funding will flow through the dark-money nonprofit Public First Action and allied PACs, in opposition to Leading the Future, a super PACs backed by primarily by OpenAI president and cofounder Greg Brockman and venture firm\u00a0 Andreessen Horowitz. \u00a0While Anthropic avoided naming OpenAI directly, it warned that \u201cvast resources\u201d are being deployed to oppose AI safety efforts, highlighting a deepening divide within the AI industry over how tightly powerful models should be regulated \u2014 and signaling that the battle over AI governance is now playing out not just in labs and boardrooms, but at the ballot box.<\/p>\n<p class=\"o-topper__headline\"><span class=\"headline__text\"><strong>Mustafa Suleyman plots AI \u2018self-sufficiency\u2019 as Microsoft loosens OpenAI ties.<\/strong> The <em>Financial Times<\/em> reported that Microsoft is pushing toward what its AI chief Mustafa Suleyman calls \u201ctrue self-sufficiency\u201d in artificial intelligence, accelerating efforts to build its own frontier foundation models and reduce long-term reliance on OpenAI, even as it remains one of the startup\u2019s largest backers. In an interview, Suleyman said the shift follows a restructuring of Microsoft\u2019s relationship with OpenAI last October, which preserved access to OpenAI\u2019s most advanced models through 2032 but also gave the ChatGPT maker more freedom to seek new investors and partners \u2014 potentially turning it into a competitor. Microsoft is now investing heavily in gigawatt-scale compute, data pipelines, and elite AI research teams, with plans to launch its own in-house models later this year, aimed squarely at automating white-collar work and capturing more of the enterprise market with what Suleyman calls \u201cprofessional-grade AGI.\u201d\u00a0<\/span><\/p>\n<p><strong>OpenAI releases its first model designed for super-fast output.<\/strong> OpenAI has released a research preview of GPT-5.3-Codex-Spark, the first tangible product of its partnership with Cerebras, using the chipmaker\u2019s wafer-scale AI hardware to deliver ultra-low-latency, real-time coding in Codex. The smaller model, a streamlined version of GPT-5.3-Codex, is optimized for speed rather than maximum capability, generating responses up to 15\u00d7 faster so developers can make targeted edits, reshape logic, and iterate interactively without waiting for long runs to complete. Available initially as a research preview to ChatGPT Pro users and a small set of API partners, the release signals OpenAI\u2019s growing focus on interaction speed as AI agents take on more autonomous, long-running tasks \u2014 with real-time coding emerging as an early test case for what faster inference can unlock.<\/p>\n<p><span style=\"font-weight:400\"><strong>Anthropic will cover electricity price increases from its AI data centers.<\/strong> Following a similar announcement by OpenAI last month, Anthropic <\/span><span style=\"font-weight:400\">announced<\/span><span style=\"font-weight:400\"> yesterday that as it expands AI data centers in the U.S., it will take responsibility for any increases in electricity costs that might otherwise be passed on to consumers, pledging to pay for all grid connection and upgrade costs, bring new power generation online to match demand, and work with utilities and experts to estimate and cover any price effects; it also plans to invest in power-usage reduction and grid optimization technologies, support local communities around its facilities, and advocate for broader policy reforms to speed up and lower the cost of energy infrastructure development, arguing that building AI infrastructure shouldn\u2019t burden everyday ratepayers.<\/span><\/p>\n<p class=\"text-display-2\"><strong>Isomorphic Labs says it has unlocked a new biological frontier beyond AlphaFold.<\/strong> Isomorphic Labs, the Alphabet- and DeepMind-affiliated AI drug discovery company, says its new Isomorphic Labs Drug Design Engine represents a significant leap forward in computational medicine by combining multiple AI models into a unified engine that can predict how biological molecules interact with unprecedented accuracy. A blog post said that it more than doubled previous performance on key benchmarks and outpaced traditional physics-based methods for tasks like protein\u2013ligand structure prediction and binding affinity estimation \u2014 capabilities the company argues could dramatically accelerate how new drug candidates are designed and optimized. The system builds on the success of AlphaFold 3, an advanced AI model released in 2024 that predicts the 3D structures and interactions of all life&#8217;s molecules, including proteins, DNA and RNA. But the company says it goes further by identifying novel binding pockets, generalizing to structures outside its training data, and integrating these predictions into a scalable platform that aims to bridge the gap between structural biology and real-world drug discovery, potentially reshaping how pharmaceutical research tackles hard targets and expands into complex biologics.<\/p>\n<h3>EYE ON AI NUMBERS<\/h3>\n<h2>77%<\/h2>\n<p>That&#8217;s how many security professionals report at least some comfort with allowing autonomous AI systems to act without human oversight, though they are still cautious, according to a new survey of 1,200 security professionals by Ivanti, a global enterprise IT and security software company. In addition, the report found that adopting agentic AI is a priority for 87% of security teams.\u00a0<\/p>\n<p>However, Ivanti&#8217;s chief security officer, Daniel Spicer, says security teams should not be so comfortable with the idea of deploying autonomous AI.\u00a0 Although defenders are optimistic about the promise of AI in cybersecurity,\u00a0 the findings also show companies are falling further behind in terms of how well-prepared they are to defend against a variety of threats.\u00a0<\/p>\n<p>&#8220;This is what I call the &#8216;Cybersecurity Readiness Deficit,'&#8221; he wrote in a blog post, &#8220;a persistent, year-over-year widening imbalance in an organization&#8217;s ability to defend their data, people and networks against the evolving tech landscape.&#8221;\u00a0<\/p>\n<h3>AI CALENDAR<\/h3>\n<p><strong>Feb. 10-11:\u00a0<\/strong>AI Action Summit, New Delhi, India.<\/p>\n<p><strong>Feb. 24-26:\u00a0<\/strong>International Association for Safe &amp; Ethical AI (IASEAI), UNESCO, Paris, France.<\/p>\n<p><strong>March 2-5:\u00a0<\/strong>Mobile World Congress, Barcelona, Spain.<\/p>\n<p><strong>March 16-19:\u00a0<\/strong>Nvidia GTC, San Jose, Calif.<\/p>\n<p><strong>April 6-9:<\/strong> HumanX, San Francisco.\u00a0<\/p>\n<\/div>\n<p>#OpenClaw #opensource #agent #security #experts #edge<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Welcome to Eye on AI, with AI &hellip; <\/p>\n","protected":false},"author":1,"featured_media":21242,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[2],"tags":[2923,768,2920,684,804,2936,4076,11192,12848,441],"_links":{"self":[{"href":"https:\/\/microvibenews.com\/index.php?rest_route=\/wp\/v2\/posts\/21241"}],"collection":[{"href":"https:\/\/microvibenews.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/microvibenews.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/microvibenews.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/microvibenews.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=21241"}],"version-history":[{"count":0,"href":"https:\/\/microvibenews.com\/index.php?rest_route=\/wp\/v2\/posts\/21241\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/microvibenews.com\/index.php?rest_route=\/wp\/v2\/media\/21242"}],"wp:attachment":[{"href":"https:\/\/microvibenews.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=21241"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/microvibenews.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=21241"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/microvibenews.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=21241"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}