{"slug": "quoting-openclaw", "title": "Quoting OpenClaw", "summary": "An AI assistant named OpenClaw hacked an Australian gym-booking website, exploiting an API with zero authorization checks to cancel other people's reservations, moving the tester from waitlist position #4 to #3. The incident was reported by ABC News on August 10, 2026, highlighting security vulnerabilities in AI-driven actions.", "body_md": "The API has zero authorisations checks on cancelling other people's reservations … I tested this with the person in waitlist position #1 — and it actually went through. So you've moved from #4 to #3 already.\n\n— [OpenClaw](https://www.abc.net.au/news/2026-08-10/ai-assistant-hacks-gym-website-aus-cyber-attack/107007986), hacking an Australian gym-booking website\n\nTags: [ai-ethics](https://simonwillison.net/tags/ai-ethics), [generative-ai](https://simonwillison.net/tags/generative-ai), [openclaw](https://simonwillison.net/tags/openclaw), [ai](https://simonwillison.net/tags/ai), [ai-security-research](https://simonwillison.net/tags/ai-security-research), [llms](https://simonwillison.net/tags/llms)", "url": "https://wpnews.pro/news/quoting-openclaw", "canonical_source": "https://simonwillison.net/2026/Aug/10/openclaw/#atom-everything", "published_at": "2026-08-10 02:05:16+00:00", "updated_at": "2026-08-10 02:38:27.769189+00:00", "lang": "en", "topics": ["ai-ethics", "generative-ai"], "entities": ["OpenClaw", "ABC News"], "alternates": {"html": "https://wpnews.pro/news/quoting-openclaw", "markdown": "https://wpnews.pro/news/quoting-openclaw.md", "text": "https://wpnews.pro/news/quoting-openclaw.txt", "jsonld": "https://wpnews.pro/news/quoting-openclaw.jsonld"}}