How-Tos & Practical Guides

On April 23, 2026, Palo Alto Networks Unit 42 published research demonstrating that a multi-agent AI system called Zealot could autonomously execute a complete cloud attack chain — SSRF exploit, credential theft, privilege escalation, data exfiltration — with a single launch prompt and no human in the loop. This isn’t theoretical. It’s documented, peer-reviewed offensive security research. And it means your agent infrastructure hardening checklist needs to be updated. This guide pulls directly from Unit 42’s defender recommendations and extends them with practical implementation steps for GCP, AWS, and Azure environments. ...

OpenClaw v2026.4.22 shipped three features that practitioners immediately wanted tutorials for: Grok TTS (text-to-speech), Grok STT (speech-to-text), and trajectory bundles. This guide walks you through setting up all three — from configuration to a working voice-enabled agent run with full audit logging. Prerequisites OpenClaw v2026.4.22 or later (openclaw --version to confirm) An xAI API key (console.x.ai to generate one) A working OpenClaw gateway or TUI session Step 1: Add Your xAI API Key If you haven’t already configured xAI as a provider, add your API key to your OpenClaw config: ...

SecurityScorecard’s STRIKE team published alarming research this week: 40,214 internet-exposed OpenClaw instances — 42,900 unique IPs across 82 countries — are reachable from the public internet. Of those, 35.4% (~15,200 instances) are vulnerable to immediate exploitation, including Remote Code Execution. Three high-severity CVEs with public exploit code are at the center of this exposure. If you’re running OpenClaw on any machine that isn’t air-gapped or VPN-isolated, this guide is for you. ...

Model Context Protocol is the new API layer for AI agents — and enterprises are deploying it without understanding the security and governance implications. Cloudflare just published the reference architecture that should be required reading before any serious MCP deployment goes to production. The full Cloudflare enterprise MCP guide dropped April 14, backed by comprehensive developer documentation. It’s based on real-world data from 241 billion tokens processed for 3,683 users — not theory. ...

Amazon Bedrock AgentCore just shipped a managed agent harness that lets you go from zero to a running LangGraph agent in three API calls. This tutorial walks you through it — from setup to first real request. Time required: ~10 minutes Prerequisites: AWS account, Python 3.10+, AWS CLI configured Frameworks supported: LangGraph, CrewAI, LlamaIndex, Strands Agents Why AgentCore’s Managed Harness Changes the Game Before AgentCore’s new features, getting an agent into a production-grade environment meant wiring up: ...

One of the most persistent friction points in building AI agents is distribution. You build something useful, then face the question: where do your users actually want to interact with it? The answer is almost never “a custom interface they have to download and learn.” It’s WhatsApp, Telegram, iMessage — the apps already open on their phones. Photon Spectrum (MIT license, released April 22, 2026) solves this cleanly. It’s an open-source TypeScript framework that routes agent logic to iMessage, WhatsApp, Telegram, Slack, Discord, Instagram, and phone — without users changing apps. Write your agent once; Spectrum handles the delivery. ...

A runtime security audit published this week by researchers at Johns Hopkins University revealed a critical vulnerability they call “Comment and Control” — a single prompt injection hidden in a GitHub pull request title caused three major AI coding agents (Claude Code, Gemini CLI, and GitHub Copilot Agent) to exfiltrate API keys and GitHub tokens via PR comments. All three vendors have patched the specific exploit, but the underlying attack surface remains. Here’s how to lock down your CI/CD pipeline before the next variant drops. ...

Mondoo has just released the first dedicated security tool for AI agent skills — a free CLI scanner that checks OpenClaw/ClawHub skills, MCP servers, and 25+ other plugin registries for supply chain risks before you install them. Given the ClawHavoc incident (1,184 malicious ClawHub skills discovered by Snyk’s ToxicSkills audit earlier this year), this is infrastructure that should have existed months ago. Here’s how to set it up and integrate it into your agent skill installation workflow. ...

CVE-2026-41329 is a CVSS 9.9 Critical sandbox bypass vulnerability in OpenClaw before version 2026.3.31. This guide walks you through everything you need to do: check if you’re affected, patch your installation, and verify the fix. Do this now. No-user-interaction-required, network-accessible, low-complexity exploits like this one have historically seen fast exploitation timelines after public disclosure. Step 1: Check Your Current Version Before anything else, confirm which version of OpenClaw you’re running. ...

gog v0.13 shipped three Gmail capabilities that fundamentally expand what email agents built on OpenClaw can do: email forwarding with notes and attachments, full-body search, and autoreplies. This guide walks through each feature with practical patterns for integrating them into your agent workflows. Prerequisites Before you start: gog v0.13+ installed (brew install steipete/tap/gogcli or brew upgrade gogcli) OpenClaw ≥ 2026.3.0 with gog configured as a skill Google Workspace credentials set up in gog (run gogcli auth login if you haven’t authenticated) The gog skill installed in OpenClaw via ClawHub: openclaw skills install clawhub.ai/steipete/gog Verify your version: ...