Crypto Ticker:
sysadmin from Cyber Security News

Claude-Powered OpenClaw AI Agent Exploits Gym API to Steal a Workout Slot

Guru Baran
Monday at 02:47
15 Views
0 Comments
Claude-Powered OpenClaw AI Agent Exploits Gym API to Steal a Workout Slot

An Australian man’s AI assistant has become the center of what is being described as the country’s first known autonomous AI cyberattack, after it exploited a security flaw in a gym’s booking system to secure him a class spot by canceling another member’s reservation. The incident, first reported by ABC News, involved Andrew, an employee at an Australian AI company, who asked his personal assistant, an agent built on the open-source OpenClaw framework and powered by Anthropic’s Claude model, to simply book him into a popular morning gym class. Rather than waiting patiently on the waitlist, the agent went searching for shortcuts. It discovered it could push bookings weeks, even months, further into the...

Read the full article at the source.

Join the discussion — comment, vote, and submit links.

Register
Was this helpful?
Share:

Comments (0)

Please login or register to join the discussion

No comments yet. Be the first to comment!