Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

This advisory describes an ecosystem-level risk that emerges when AI agents are able to autonomously read and act on untrusted content while operating with user-level permissions in a web browser.

As organizations develop modern Identity and Access Management (IAM) strategies to defend against advanced cyber threats, it’s essential to implement both Identity Governance and Administration (IGA) and Privileged Access Management (PAM) as part of a defense-in-depth approach. PAM provides granular control and monitoring of privileged accounts at runtime, while IGA ensures appropriate access is approved, governed and reviewed throughout the identity lifecycle.

MoltBot(formerly Clawd Bot), the locally running, open-source AI agent named after the Lobster workflow shell that powers its agentic loop, has rocked an AI community that, just weeks ago, was so in love with its own hype it would have yawned at literal magic.

OpenClaw(formerly Clawd Bot, MoltBot), the locally running, open-source AI agent named after the Lobster workflow shell that powers its agentic loop, has rocked an AI community that, just weeks ago, was so in love with its own hype it would have yawned at literal magic.

Managed Service Providers (MSPs) are third-party companies that typically handle a portfolio of other organizations’ IT operations or day-to-day activities. This puts MSPs on the front lines of cybersecurity for numerous businesses, often in highly regulated industries, handling some of their most sensitive data. Even the most experienced MSPs struggle to securely manage passwords, credentials, sensitive files and privileged access across dozens of client environments.

Although cloud-native environments drive modern innovation and enable scalability, they also introduce new vulnerabilities that traditional perimeter-based security models cannot address. According to Orca Security’s 2025 State of Cloud Security Report, 95% of organizations have at least one cloud asset that enables lateral movement, making it easier for cybercriminals to navigate cloud environments undetected.