China 360 Digital Security Group has found a high-risk vulnerability in the AI agent tool OpenClaw, affecting more than 170,000 instances worldwide. The vulnerability exploits a design flaw in the MEDIA protocol to bypass security policies, allowing attackers to steal sensitive server information using only chat group member permissions. Security authorities have issued a warning, advising immediate emergency response measures to prevent data breaches.

GoPlus issued an alert, stating that the Anthropic Claude Chrome extension has a critical Prompt Injection vulnerability, affecting more than 3 million users. Attackers can steal Google Drive files and Gmail access permissions without any user action. The vulnerability has been fixed. Users need to check the extension version and ensure it is updated to 1.0.41 or higher to ensure security.

"Uma Musume" developer Cygames has established Cygames AI Studio to develop game animation-specific small models to avoid ChatGPT copyright disputes. They are recruiting AI vocalists, reinforcement learning, and language model engineers to train using internal group data. The parent company CyberAgent is promoting the AI Japanese drama "TOKYO Shrine Maiden Ninja," and the Japanese gaming industry is actively adopting AI.