• OpenClaw is rarely out of the news, but not necessarily under that name. • This ‘autonomous personal assistant’ started life as Clawdbot, changed its name to Moltbot, and is now OpenClaw. • All references to any of these names refer to the same product.On February 14, 2026, Peter Steinberger - the developer of OpenClaw - announced he is joining OpenAI. • OpenClaw is transitioning into the OpenClaw Foundation with OpenAI providing financial and technical support. • The most continuous and consistent news, however, remains OpenClaw’s security failings.It combines a popular and valuable service to its users with an almost magnetic attraction for attackers. • In a January blog, Cisco Talos describes OpenClaw as “groundbreaking”: a dream for busy professionals, but “an absolute nightmare” from a security perspective.SecurityOpenClaw cannot be criticized over recent attempts to improve its security.
Article Summaries:
- OpenClaw, the AI‑powered personal assistant that has repeatedly attracted security headlines, is now transitioning into the OpenClaw Foundation under the financial and technical backing of OpenAI. Despite rapid patching of recent CVEs-CVE‑2026‑25157, CVE‑2026‑25253, CVE‑2026‑24763, CVE‑2026‑25593, and CVE‑2026‑25475-many older installations remain vulnerable, and widespread misconfiguration risks persist. The article also reports a supply‑chain attack (ClawHavoc) that leveraged malicious skill plugins to steal API keys. Amid these ongoing concerns, a new open‑source tool, SecureClaw, has been launched to help users harden their deployments.
Sources: