The installation package for 360's OpenClaw Assistant leaked an SSL private key, despite Zhou Hongyi's previous promise that "passwords would never be leaked."
Svmuu News: Security researcher Lukasz Olejnik posted on X stating that the SSL private key for 360’s AI OpenClaw assistant, “360 Security Lobster,” was exposed in the installation package. The private key corresponds to the domain *.myclaw.360.cn and is valid until April 2027. Attackers could exploit this private key to impersonate 360 servers, intercept user traffic, or create fake login pages. Previously, 360 founder Zhou Hongyi had promised “absolutely no password leaks” when launching the product. It is worth noting that 360 currently has 461 million users, and the company is valued at approximately $10 billion. This report has also been corroborated by some developers in the Chinese-speaking community.
No AI analysis yet. Tap the "AI Analysis" button above to generate one now.
Disclaimer: This content reflects the author's personal views only and does not constitute investment advice.
24H Trending
-
1
Bitcoin Price Breaks $77,000: Multiple Factors Drive Current Rally
-
2
US banks are owed $349B by private credit funds, as PIK interest payments rise to 10% of loans
-
3
Al Jazeera: Israeli attacks on Gaza kill at least 4 Palestinians, UN Human Rights Office warns of ethnic cleansing risk
-
4
Musk retweeted that as of October 31, the number of Starlink satellites has reached 11,184, accounting for 66% of the total active satellites globally.
-
5
Bitcoin staking protocol b14g says $97 million CORE drained, pauses contracts
-
6
Nikkei Asia: Overseas entities' JPY bond issuance reaches a record $16 billion as the AI funding race spreads to Japan
-
7
Al Jazeera: Palestinian Man Succumbs to Injuries After Israeli Drone Strike in Gaza
-
8
SpaceXAI, the AI division of SpaceX, failed to dismiss an air pollution lawsuit filed by the NAACP, with the judge ruling that the case will proceed.
-
9
Chainalysis: Ethereum Reorg Causes THORChain Emergency Pause, Accidentally Delays Binance Hacked Funds Laundering
-
10
Binance confirmed that it has transferred 7,499 Bitcoins to the SAFU fund, stating that it has recovered 90% of the stolen assets and pledged to rebuild the emergency fund to approximately $1 billion.
Markets Today
Recommended Reading


