https://www.msbiro.net/tags/threat-analysis/ Recent content in Threat-Analysis on Cloud Native & Open Source: A Team Lead’s Working Journal https://www.msbiro.net/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E https://www.msbiro.net/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E Hugo -- 0.164.0 en-us Sat, 31 Jan 2026 01:44:33 +0000 https://www.msbiro.net/posts/openclaw-security-analysis/ Sat, 31 Jan 2026 01:44:33 +0000 https://www.msbiro.net/posts/openclaw-security-analysis/ A comprehensive security analysis of the OpenClaw AI assistant project. Examining three name changes in 10 days as a confusion attack pattern, exposed cloud instances due to misconfiguration, the fake VS Code plugin incident, and the hidden costs of running AI agents on your own API keys. Why I can't use this tool with my real accounts despite being an AI enthusiast.