OpenClaw

OpenAI shipped ChatGPT Library — a persistent file storage system that survives across conversations — and most coverage has treated it as a quality-of-life feature. You can finally keep your documents without re-uploading them. Convenient! But there’s a more interesting way to read this announcement, and it’s the one that matters for anyone tracking how AI agents are evolving: this is memory infrastructure, and it’s the foundation that makes persistent agents possible at scale. ...

If you’re running OpenClaw and haven’t updated recently, stop what you’re doing and check your version. A newly disclosed vulnerability — CVE-2026-32895 — allows an attacker with basic access to bypass the authorization controls that keep your Slack DM allowlists and per-channel user restrictions intact. The fix is in version 2026.2.26 and later. If you’re not there, you’re exposed. What’s Vulnerable The flaw lives in OpenClaw’s system event handlers for two subtypes: member and message. These handlers process events like message_changed, message_deleted, and thread_broadcast — normal Slack plumbing that OpenClaw routes and acts on. ...

OpenAI has quietly shipped one of its most structurally important features in months: ChatGPT Library — persistent file storage that persists across conversations, available across ChatGPT’s web and app interfaces. On its surface, it looks like a convenience feature. Upload your documents, reference them later, organize them in one place. Useful, unremarkable. The analysis from Nicholas Rhodes in his Substack newsletter argues it’s actually something more significant: foundational long-term memory infrastructure for AI agents. ...

A new OpenClaw security vulnerability has been publicly disclosed. If you’re running OpenClaw, check your version right now. CVE-2026-32895 (CVSS 5.3 — Medium) affects all OpenClaw versions prior to 2026.2.26. The patch is available. There is no good reason to stay on a vulnerable version. What the Vulnerability Does The flaw is an authorization bypass in OpenClaw’s system event handlers — specifically the member and message subtype handlers. OpenClaw lets administrators restrict which users can interact with an agent via Slack DM allowlists and per-channel user allowlists. CVE-2026-32895 breaks that enforcement. An attacker who is not on a channel’s allowlist can craft and send system events that the vulnerable handlers process anyway, effectively bypassing the access controls entirely. ...

On March 26 in San Francisco’s Financial District — two days from now — something notable is happening in the AI agent security space: Gen (NASDAQ: GEN, the parent company of Norton, Avast, and LifeLock) is co-hosting an exclusive post-RSA event with the OpenClaw core team. This is the first confirmed public partnership between the OpenClaw team and a major enterprise cybersecurity vendor. And it matters beyond the event itself. ...

饲养龙虾. Sìyǎng lóngxiā. “Raising lobsters.” That’s the phrase that took root in Chinese tech communities to describe the act of setting up and nurturing a personal OpenClaw AI agent. And for a few months, it was a national phenomenon — enthusiastic, grassroots, and spreading fast. Now, according to a sweeping NBC News feature published March 24, the craze is running into its first serious friction: government security concerns, corporate pullbacks, and a mainstream media that still can’t quite tell OpenClaw from OpenAI. ...

On March 26, Gen Digital — the NASDAQ-listed parent company of Norton, Avast, and LifeLock — will co-host an exclusive post-RSA event in San Francisco’s Financial District with members of the OpenClaw core team. The event, “The Future of Safe AI Agents,” marks what appears to be the first confirmed public partnership between the OpenClaw team and a major cybersecurity vendor. What’s Being Demoed The centerpiece of the event is Gen’s Agent Trust Hub (ATH) — a free security platform launched in February 2026 designed to help individuals and organizations govern AI agent behavior before and during deployment. ...

In China, the community idiom for setting up your own AI agent has a flavor entirely its own: 饲养龙虾 — “raising lobsters.” It’s grassroots, organic, and a little absurd in the best way. And it tells you something important about how a technology with deep American roots became a Chinese phenomenon within months. What Is “Raising Lobsters”? OpenClaw, the open-source AI agent platform created by Austrian programmer Peter Steinberger, has swept China with remarkable speed since its November release. More than 600 million people in China — over a third of the population — now use generative AI, according to a Chinese government-affiliated research group. OpenClaw usage in China is reportedly almost double that in the US, per American cybersecurity firm SecurityScorecard. ...

OpenClaw has been expanding rapidly — on desktops, servers, enterprise tools, and now into consumer Android hardware. TECNO, the Transsion Holdings brand dominating smartphone sales across Africa and Southeast Asia, has announced EllaClaw — the first OpenClaw-powered AI agent deployed on a consumer Android smartphone. What Is EllaClaw? EllaClaw is the integration of OpenClaw’s agentic framework into TECNO’s Ella AI assistant, which ships across TECNO’s device lineup. The “Claw” naming convention signals OpenClaw’s architecture: a fixed-authorization agent with a defined scope of system permissions, operating autonomously on behalf of the device owner. ...

Announced from New York this morning, TuyaClaw is Tuya Smart’s integration of OpenClaw into its smart home IoT platform — and it’s the most concrete demonstration yet of OpenClaw expanding beyond digital workflows into physical hardware control. What TuyaClaw Does Tuya Smart (NYSE: TUYA) is one of the world’s largest IoT platform companies, powering connected devices across hundreds of hardware brands — smart lights, thermostats, security cameras, locks, appliances, and sensors. TuyaClaw brings an OpenClaw agent into this ecosystem, enabling: ...