National Industrial Information Security Development Research Center: Release Risk Warning Bulletin for Industrial Sector OpenClaw Applications

The National Industrial Information Security Development Research Center has issued a "Risk Warning Notice on the Application of OpenClaw in the Industrial Field": OpenClaw is currently accelerating its deployment in various stages such as research and design, production and manufacturing, and operations management in the industrial field. However, due to the characteristics of OpenClaw such as fuzzy trust boundaries, unified access through multiple channels, flexible invocation of large models, and dual-model persistent memory, once effective permission control strategies or security audit mechanisms are lacking, it may be maliciously taken over due to instruction induction, supply chain poisoning, etc., leading to a series of security risks such as loss of control of industrial control systems and leakage of sensitive information. Specific risks include unauthorized access to industrial hosts and loss of production control risks, risks of leakage of industrial sensitive information, and risks of expanding the attack surface and amplifying attack effects for industrial enterprises. Therefore, it is recommended that industrial enterprises refer to the "Industrial Control System Network Security Protection Guidelines" and the "Industrial Internet Security Classification and Grading Management Measures" and other relevant requirements, refer to the "Six Do's and Don'ts" suggestions already published on the Ministry of Industry and Information Technology's Network Security Threat and Vulnerability Information Sharing Platform, strengthen security protection measures when deploying and using OpenClaw, including strengthening control permission management, strengthening network boundary isolation, and carrying out vulnerability patch fixes.
Latest news
9 h ago

Hong Kong Independent Commission Against Corruption: Working with the Securities and Futures Commission to combat insider trading and corruption, 8 individuals have been arrested.

The Hong Kong Independent Commission Against Corruption (ICAC) announced today that, in a joint operation with the Hong Kong Securities and Futures Commission on March 10th and 11th codenamed "Fuse", they have cracked down on suspected insider trading and corruption activities. Two securities firms, a hedge fund management company, and senior executives are all persons of interest in this case. During the joint operation, law enforcement officers conducted searches at 14 locations, including the offices and residences of the two securities firms and the hedge fund management company, resulting in the arrest of six men and two women aged between 35 and 60. Investigations revealed that a senior executive of one of the involved securities firms allegedly accepted over 4 million US dollars in bribes from the head of the hedge fund management company in exchange for leaking confidential information about the stock placements of multiple Hong Kong-listed companies. The hedge fund then established short positions in the relevant stocks, profiting from short selling and entering into short stock swap contracts. When the placement information was eventually made public, the stock prices dropped, allowing the hedge fund to make approximately 315 million US dollars in profits. This morning, Guotai Junan International announced that one of their employees has been detained by the ICAC, and the employee was taken away from their home.
Latest news
12 h ago
  • 1
  • 2
  • 3
  • 4
  • 5
  • 712