🔥Stalecollected in 16m

360 Safety Lobster Private Key Leaked

360 Safety Lobster Private Key Leaked
PostLinkedIn
🔥Read original on 36氪

💡AI security tool leaks private key post-launch—critical lessons for agent devs

⚡ 30-Second TL;DR

What Changed

Launched '360安全龙虾' app, Box hardware, and Dragon Shrimp Guard on March 14.

Why It Matters

Exposes risks in rushed AI product releases, urging better credential security practices. Ties into OpenClaw ecosystem vulnerabilities, affecting agent deployments.

What To Do Next

Scan AI agent installers for hardcoded keys using tools like TruffleHog before release.

Who should care:Developers & AI Engineers

Key Points

  • Launched '360安全龙虾' app, Box hardware, and Dragon Shrimp Guard on March 14.
  • Plaintext generic-domain SSL cert and RSA private key found in unpacked installer path.
  • 360 immediately revoked certificate, invalidating it and blocking attacks.
  • Company states ordinary users unaffected technically.

🧠 Deep Insight

Background and context from public sources — not the original article. 7 sources cited.

🔑 Enhanced Key Takeaways

  • Qihoo 360 founder Zhou Hongyi announced 360 Security Lobster on March 10, 2026, positioning it as a commercial wrapper for the open-source OpenClaw AI agent to address its high installation barriers, unpredictable results, and security vulnerabilities.[1]
  • Zhou Hongyi publicly promised six days before the leak discovery that 360 Security Lobster would not damage systems, delete data, or leak passwords and private information.[1]
  • The leaked SSL certificate was a wildcard key issued by WoTrus CA Limited, previously distrusted by major browsers for fraud and now operating on Qihoo 360's infrastructure.[1]

🔮 Future ImplicationsAI analysis grounded in cited sources

360 Security Lobster's leaked private key undermines trust in its security claims over OpenClaw
The product intended to fix OpenClaw's vulnerabilities introduced a more severe issue by leaking a platform-wide wildcard SSL private key.[1]

Timeline

2026-03-10
Zhou Hongyi announces 360 Security Lobster as OpenClaw wrapper
2026-03-14
360 launches Security Lobster app, Box hardware, and Lobster Guardian
2026-03-16
Researchers discover plaintext SSL certificate and RSA private key in installer
📰

Weekly AI Recap

Read this week's curated digest of top AI events →

👉Related Updates

AI-curated news aggregator. All content rights belong to original publishers.
Original source: 36氪

This is a summary, not the original. Read the source, or get the weekly briefing.

Weekly AI briefing

One email a week. Unsubscribe anytime.