Thanks to rapid developments around AI, cybersecurity pros seem due for a reminder that the threat landscape has fundamentally changed. This time it’s OpenClaw ringing the alarm bells, but in truth we see the same cycle repeating itself time and time again, just with new technology.
Within days of OpenClaw’s open-source, researchers discovered exposed management interfaces and malicious “skills” packages designed to trick users into installing compromised functionality.
While the legitimate security community did what it always does, innovate rapidly, attackers moved just as fast.
Latest Videos FromTechRadar
CEO and Co-founder, ThreatLocker.
That reality should force organizations that haven’t already done so to rethink a dangerous assumption: the belief that if something malicious appears inside our environment, internet security products will detect it quickly enough to stop serious damage.
That assumption is unrealistic in the world of AI-driven automation and open-source agent ecosystems.
The better question is: ‘Why should unknown software be allowed to run in the first place?’
Uncontrolled AI adoption is the core issue
OpenClaw highlights the much larger issue of Shadow AI running across organizations. Employees are downloading local AI agents, experimenting with open-source models, installing community-developed skills and connecting all of these tools directly to corporate resources.
Unlike traditional SaaS applications, many of these agentic platforms execute directly on endpoints. They request filesystem access, interact with browsers, connect to cloud services and automate business workflows.
Every new skill, extension or plugin expands the attack surface. While AI usage is an important progression of technology, the problem that’s emerging is that organizations frequently have little visibility or control over which AI tools are entering their environment, let alone what they’re allowed to do once they arrive.
Detection can’t keep up with automated attacks
The industry continues investing enormous resources into detecting threats faster and there is absolutely value in that; but OpenClaw illustrates why detection alone cannot be the primary strategy.
By the time a detection platform identifies suspicious behavior, an AI agent may already have accessed sensitive files, authenticated them to cloud services, downloaded additional components or exposed confidential information. Instead of asking how quickly we can detect something, organizations need to first ask whether it should have been able to execute at all.
Control AI without disrupting the business
To effectively mitigate AI-driven cybersecurity threats, the industry must embrace a Zero Trust approach that moves from an allow-by-default to a deny-by-default posture.
In the context of Shadow AI, application allowlisting ensures only approved agents run inside your environment, while application containment further limits what those trusted agents are allowed to do.
This way, if an agent is compromised, any unnecessary access to files, memory, scripting engines, networking functions or other applications is blocked entirely.
Together, these controls enforce the boundaries your business already intended to have.
One of the biggest misconceptions surrounding Zero Trust is that it requires organizations to lock everything down overnight. This isn’t true.
When done correctly, application control allows organizations to understand what’s already running, establish normal operating behavior and gradually enforce policies without disrupting users.
Define what good looks like
Cybersecurity has traditionally focused on identifying bad behavior, yet attackers are constantly inventing new forms of it. A more sustainable model is to define what good looks like for your organization.
If a script or application like OpenClaw is not explicitly approved inside your environment, it shouldn’t be allowed to execute.
The bottom line is that if an AI agent doesn’t require access to sensitive directories, cloud resources, PowerShell or credential stores, those interactions shouldn’t be possible. This deny-by-default approach dramatically reduces the opportunities available to both attackers and compromised applications.
Rather than chasing an endless stream of new threats, you’re enforcing known business requirements.
The leadership lesson
Open-source innovation has enormous value and will continue driving technological progress, but every major cyber incident teaches a lesson.
The Open Claw incident shows that organizations can no longer afford environments where any new tool is free to operate with minimal oversight. Leadership teams need to stop measuring success by how quickly they respond to breaches and start measuring how effectively they’ve reduced the opportunity for one to occur in the first place.
Open-source AI ecosystems will continue evolving at remarkable speed, new capabilities will continue to emerge. In tandem, attackers will continue to innovate their own methods. Fortunately, your security strategy doesn’t need to change every time a new threat emerges.
The principles behind hardening your environment remain the same: know what belongs in your environment, and allow only what you’ve explicitly approved. Restrict what trusted applications can do, and treat every request for access as untrusted until proven otherwise.
Organizations that embrace that philosophy won’t just be better prepared for OpenClaw, they’ll be ready for whatever comes next.
We’ve reviewed, rated, and ranked the best firewall software.
This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.
The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit
