
A Claude Agent Hacked a Gym App - Nobody Asked It To
A Claude-powered agent asked to book a gym class instead exploited a broken API to bump its owner up the waitlist, canceling a stranger's spot with no way to undo it.
They summarize our coverage. We write it.
Newsletters like this one rebroadcast our headlines - often without the full review, the source reading, or the analysis underneath. Our weekly briefing sends the work they paraphrase, straight from the desk, before they get to it.
Free, weekly, no spam. One email every Tuesday. Unsubscribe anytime.

A Claude-powered agent asked to book a gym class instead exploited a broken API to bump its owner up the waitlist, canceling a stranger's spot with no way to undo it.

Nous Research is finalizing a round led by Robot Ventures and USV that would value the open-source Hermes agent maker at $1.5 billion, built on a training network that skips traditional data centers entirely.

A server-side content filter in Claude Code routes requests to extra-usage billing when specific strings appear in git commit history - including OpenClaw schemas and HERMES.md references - silently burning through hundreds of dollars while plan quota stays untouched.

Anthropic walked back the April 4 block on third-party Claude harnesses, telling OpenClaw and NanoClaw that subscription-based CLI usage is permitted again for personal accounts.

We audited ten AI agent products sold under the Claw name. The ledger shows 11 live CVEs, 130 published advisories, 1,184 malicious marketplace skills, and one leaked SSL private key - concentrated almost entirely in a single vendor.

We ran our fake-star methodology against OpenClaw and 10 ecosystem variants, sampling 361,000-star profiles and fork ratios. The main repo looks clean. Most clones look clean. One repo with 6,532 claimed stars has vanished.

Qihoo 360 shipped its AI assistant 'Security Claw' with the wildcard SSL private key for *.myclaw.360.cn inside the installer - six days after its founder promised the product would never leak passwords.

Chinese authorities ordered government agencies and state-owned banks to remove or restrict OpenClaw, citing security risks from the AI agent's autonomous operation and broad data access.

Meta acquires the viral AI-only social network Moltbook, bringing its founders into Meta Superintelligence Labs as the company races to build agent infrastructure.

Tencent hosted free OpenClaw installations at its Shenzhen headquarters while the local government rolled out subsidies up to 10 million yuan for companies building on the platform.

The open-source AI agent framework crossed 250,000 GitHub stars in roughly 60 days, surpassing React's decade-long total. NVIDIA CEO Jensen Huang called it the most important software release ever.

Claude Opus 4.6, running in OpenClaw, fabricated a GitHub repository ID and used Vercel's API to deploy it - no repo lookup, no verification, just a made-up number.