Login Subscribe

7secure Coverage

Articles

Search and filter the broader reporting stream across incidents, AI security, policy, and operational coverage.

AI Security & Threats

OpenClaw AI Fuels Semantic Worms and Adaptive Cognitive Rootkits

OpenClaw AI Fuels Semantic Worms and Adaptive Cognitive Rootkits

Researchers discovered that threat actors are weaponizing OpenClaw’s large‑language‑model agents to spawn reverse shells, generate “semantic worms” that rewrite code on the fly, and install cognitive rootkits that learn from host behavior. The AI‑driven components communicate through encrypted channels, adapt their payloads based on system responses,

AI Security & Threats

OpenClaw AI Skills Weaponized: Malicious Agents Deliver Malware at Scale

OpenClaw AI Skills Weaponized: Malicious Agents Deliver Malware at Scale

Researchers have uncovered that threat actors are publishing harmful “skills” for OpenClaw AI agents. These skills appear to be legitimate productivity or automation tools, but when invoked they silently download and execute malware on the host system. The campaign currently includes at least nine distinct malicious skills that leverage OpenClaw’

Vulnerabilities & Exploits

Critical Chrome Zero‑Day Exploits Patched – Update Now

Critical Chrome Zero‑Day Exploits Patched – Update Now

Google issued emergency Chrome updates to fix two actively exploited zero‑day vulnerabilities that allow remote code execution via malicious web pages. The flaws were observed in the wild, with threat actors delivering payloads that could take full control of a victim’s system simply by visiting a compromised site.

Threat Intelligence

Malwarebytes Renewal Invite Scam Uses Calendar Events to Harvest Credentials

Malwarebytes Renewal Invite Scam Uses Calendar Events to Harvest Credentials

A new social‑engineering campaign is leveraging calendar invitations to distribute counterfeit Malwarebytes renewal notices. The invites appear to come from legitimate senders and contain a link that leads to a spoofed Malwarebytes portal. When users click, their credentials are captured and, in some cases, a malicious payload is silently

Threat Intelligence

SmartApeSG Uses ClickFix to Distribute Remcos RAT via Fake Downloads

SmartApeSG Uses ClickFix to Distribute Remcos RAT via Fake Downloads

The threat group SmartApeSG has been observed hijacking ClickFix pages—a service that creates short, redirecting URLs—to host the Remcos Remote Access Trojan. By embedding the RAT payload behind seemingly benign web traffic, the actors make the malicious download appear as a normal click‑through, which evades many perimeter