PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Could OpenClaw have actually hacked that Australian gym? We decided to test it.

aikido.dev | blog | #ai-security | #ai-safety | #aikido | #ai-agents | #vulnerability-exploitation | #openclaw | #misalignment
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Aikido recreates the viral Australian gym hack in a controlled environment: with Opus 4.6 running on OpenClaw, the model exploited the booking system's flaw in nine of ten runs, booking early sessions and bumping a user off a waitlist, while only being asked for routine help.

Why it matters

This coverage gives security teams current context for monitoring, validation, and remediation.
Published
Collected

Related coverage

blog · aikido.dev
Aikido launches external network pentesting
TL;DR: Aikido now pentests your external network. Attackers already test your perimeter every day, and with AI agents doing the grunt work, they're faster than ever. Now you can run the same test first. Give our agents one domain and they'll map the internet-facing systems you run and attack them from the outside, exactly like a malicious actor would.
blog · aikido.dev
Adding Aikido AI pentesting to your existing security stack
How to add Aikido's AI pentesting on top of the SAST, SCA and cloud tools you already run, from your first pentest through whitebox testing, continuous testing and remediation.
research · projectdiscovery.io
Post-Mortem of Misaligned OpenAI Model
# Post-Mortem of Misaligned OpenAI Model Sep 7, 2026 · Tarun Koyalwar The HF-OpenAI hack incident happened on **July 20** , and there was very little information; now we have _too much_...
research · certik.com
Skill Scanning Is Not a Security Boundary
This article argues that scanning third-party OpenClaw skills (e.g. Clawhub's VirusTotal and AI review pipeline) is not a security boundary, since skills execute with full privileged-runtime access.
blog · aikido.dev
AI agent security in Kubernetes: Why prompt injection isn't the right term
This post is based on Mackenzie's conversation with Abdel Sghiouar on The Secure Disclosure podcast. Listen to the full episode or watch below.
blog · aikido.dev
Ghost in the PHP2Shell: Why coordinated disclosure and patching will start moving faster
If you run PHP anywhere in your stack and did not upgrade, stop reading this and go upgrade to a patched version. More information on this is on our advisory blog, and check out php2shell.aikido.io to see if your service is potentially vulnerable.
Back