Nanobot WhatsApp session hijack security flaw
Vulnerability
Summary
Hide ▲
Show ▼
A max-severity flaw in nanobot could let remote attackers hijack WhatsApp sessions on exposed instances. The weakness raises the risk of account takeover and session compromise for deployments reachable by attackers.
Related Happenings
OpenClaw ClawJacked localhost WebSocket brute-force security flaw
Vulnerability
H score37
First: 01.03.2026 23:44
Last: 01.03.2026 23:44
Sources 1
About this happening:
OpenClaw’s ClawJacked vulnerability allowed a malicious website to brute-force a localhost WebSocket connection and take control of a local instance, putting ses...
OpenClaw ClawJacked localhost WebSocket brute-force security flaw
VulnerabilityAbout this happening: OpenClaw’s ClawJacked vulnerability allowed a malicious website to brute-force a localhost WebSocket connection and take control of a local instance, putting ses...
Atomic MacOS Stealer (AMOS) distribution through AI-app lures, SEO poisoning, and supply-chain abuse
Malware Activity
H score31
First: 12.02.2026 16:25
Last: 12.02.2026 16:25
Sources 1
About this happening:
Atomic MacOS Stealer (AMOS) is being distributed to macOS users through ClickFix-style Terminal prompts that silently download, mount, and launch DMG payloads. In...
Atomic MacOS Stealer (AMOS) distribution through AI-app lures, SEO poisoning, and supply-chain abuse
Malware ActivityAbout this happening: Atomic MacOS Stealer (AMOS) is being distributed to macOS users through ClickFix-style Terminal prompts that silently download, mount, and launch DMG payloads. In...
OpenClaw public-facing RCE exposure with public exploit code remote code execution flaw
Vulnerability
H score72
First: 09.02.2026 11:30
Last: 09.02.2026 11:30
Sources 1
About this happening:
OpenClaw deployments exposed to the public internet face RCE risk, with 12,812 instances reportedly exploitable and public exploit code available. SecurityScorecar...
OpenClaw public-facing RCE exposure with public exploit code remote code execution flaw
VulnerabilityAbout this happening: OpenClaw deployments exposed to the public internet face RCE risk, with 12,812 instances reportedly exploitable and public exploit code available. SecurityScorecar...
ChatGPT/SearchGPT prompt injection and data exfiltration weaknesses security flaw
Vulnerability
H score1
First: 06.11.2025 12:00
Last: 06.11.2025 12:00
Sources 1
About this happening:
Researchers uncovered seven weaknesses in OpenAI's ChatGPT/SearchGPT that could let an attacker use prompt injection and safety bypass techniques to steal privat...
ChatGPT/SearchGPT prompt injection and data exfiltration weaknesses security flaw
VulnerabilityAbout this happening: Researchers uncovered seven weaknesses in OpenAI's ChatGPT/SearchGPT that could let an attacker use prompt injection and safety bypass techniques to steal privat...
Timeline
-
16.02.2026 19:32 2 articles · 4mo ago
Tenable discloses max-severity nanobot flaw
Initial DisclosureTenable identified a max-severity flaw in nanobot, an ultra-lightweight personal AI assistant inspired by OpenClaw, that could let remote attackers hijack WhatsApp sessions on exposed nanobot instances.
Show sources
- Infostealer malware found stealing OpenClaw secrets for first time — www.bleepingcomputer.com — 16.02.2026 19:32
- Infostealer malware found stealing OpenClaw secrets for first time — www.bleepingcomputer.com — 16.02.2026 19:32