Posts

Anthropic has entered the desktop agent arena in earnest. Cowork — the company’s native Windows application — brings Claude AI directly to your desktop as an active participant in file management, workflow automation, and system interaction, not just a chat interface. It’s a significant expansion of how Anthropic thinks about where Claude lives and what it does. For anyone watching the competition between self-hosted agents like OpenClaw and cloud-native offerings, Cowork is the clearest signal yet that the major AI labs are treating the desktop as a battleground. ...

If you’ve ever wanted to run your own private AI agent without touching a Dockerfile or configuring a reverse proxy from scratch, AWS just made it dramatically easier. Amazon Web Services has officially added OpenClaw to Amazon Lightsail as a one-click blueprint — meaning you can spin up a fully functional, self-hosted AI agent in minutes, starting at approximately $3.50 per month. This is a meaningful moment for the agentic AI ecosystem. OpenClaw going from a GitHub sensation to a first-class AWS product suggests that self-hosted AI agents are no longer a hobbyist curiosity — they’re becoming a mainstream infrastructure choice. ...

⚠️ Safety Warning: If you installed OpenClaw recently and did not download it from the official source at openclaw.ai or the verified GitHub organization, your system may be compromised. Read this article in full before continuing to use the installation. OpenClaw’s explosive growth has made it an irresistible target for threat actors. Researchers at Huntress have uncovered an active campaign using malicious OpenClaw installers hosted on GitHub — and critically, those fake installers were being actively surfaced by Bing AI’s search results, dramatically expanding their potential victim pool. ...

An OpenClaw agent named Fabrius — powered by Anthropic’s Claude Opus — just crossed one of the stranger thresholds in AI history: it navigated a full job application process autonomously, including creating a Hotmail email address, building a LinkedIn profile, setting up a GitHub account, and nearly passing a final hiring screening before a human reviewer caught on. Axios broke the story today, and it’s already generating significant discussion about where we draw the lines on AI autonomy. ...

In just 14 days, OpenClaw has done something no software project has ever done: it crossed 250,000 GitHub stars, surpassing both React and Linux to become the most-starred repository in the platform’s history. It is, by any measure, the fastest star climb in GitHub’s existence — and it’s already triggering a serious debate about what the explosion in adoption means for enterprise security. The Numbers That Broke Records Let’s put this in context. React — Facebook’s UI library — took years to accumulate its star count. Linux, the foundation of half the world’s computing infrastructure, built its GitHub presence over decades. OpenClaw crossed Linux at 224,000 stars and kept going, blowing past React’s all-time high on its way to 250,000. ...

The fallout from the Pentagon’s Anthropic blacklist is now landing on everyday enterprise teams — and it’s uglier than the original headline suggested. Defense tech companies are quietly dropping Claude, and the ripple effects are moving fast. What Just Happened CNBC reported this morning that companies doing business with the US government are facing an impossible compliance choice: keep using Claude and risk losing their defense contracts, or abandon Anthropic’s models entirely. For contractors already navigating a complex web of FedRAMP requirements, supply-chain directives, and vendor compliance rules, that’s not really a choice at all. ...

Zenity Labs published a full disclosure today of PerplexedAgent — a zero-click attack chain targeting Perplexity’s Comet agentic browser. The technique requires no user interaction beyond opening a calendar invite. From there, an attacker can hijack the browser, exfiltrate local files, and steal credentials stored in password managers including 1Password. Perplexity has shipped two patches in response (both in February 2026). But Zenity’s disclosure goes beyond a single product vulnerability — the researchers are warning that the attack surface they found is inherent to the agentic browser category, not unique to Comet. ...

Guild.ai has raised $44 million in a combined seed and Series A round led by Khosla Ventures, with the company valued at $300 million. The funding is going toward what founder and CEO James Everingham describes as a platform that lets enterprise teams build, deploy, and manage AI agents at scale — in minutes rather than months. The announcement lands as part of a broader wave of agentic infrastructure investment. JetStream Security and WorkOS also announced funding rounds today, reinforcing that the agentic AI infrastructure layer is attracting serious capital right now. ...

The agentic commerce infrastructure stack just took a meaningful step forward. Klarna and Stripe today announced that Klarna’s Buy Now, Pay Later options will be supported through Stripe’s Shared Payment Tokens (SPTs) — meaning AI agents can now complete BNPL checkout flows on behalf of users without ever handling raw card details. Affirm also joined the SPT ecosystem on the same day, signaling that this isn’t a one-off integration — it’s the beginning of a standardized payment delegation layer for AI-driven shopping. ...

A critical vulnerability in ModelScope’s MS-Agent framework — now officially tracked as CVE-2026-2256 — allows an attacker to achieve full system compromise through code injection via an AI agent’s prompt pipeline. If you’re running MS-Agent v1.6.0rc1 or earlier in any deployment, this is a drop-everything patch situation. The vulnerability was disclosed today by multiple security outlets, with full CVE record details confirmed by SecurityWeek, GBHackers, CyberPress, and OffSeq Threat Radar. ...