OpenClaw: Info Stealers Take Your Soul

Critical security vulnerabilities in consumer technology and corporate supply chains expose sensitive personal data to automated and behavioral exploitation. Info stealer malware now targets OpenClaw directory files, including "soul.md" files that mirror a user's entire digital life, while architectural flaws in DJI’s messaging protocols allowed a hobbyist to accidentally access live feeds and floor plans for 7,000 robot vacuums. Internal fraud cases at Best Buy, involving six-figure losses through authorized credential abuse, demonstrate that zero-trust security must move beyond simple authentication to include contextual behavioral monitoring. Furthermore, a leak of 600,000 Canada Goose customer records via a third-party payment processor highlights the persistent risk of supply chain breaches where a company’s data is compromised despite its own systems remaining secure. These incidents underscore a shift where broad, non-targeted malware and basic administrative oversights pose as much risk as sophisticated directed attacks.