Latest
●OpenAI agent swarm linked to RubyGems supply chain attack●FrontMCP SSRF patch bypassed via DNS tricks and redirects●Central Dogma Git mirror trusts any SSH host key●MySQL MCP server left SQL wide open in SSE mode●AI bug hunting ends the era of security through obscurity●Hugging Face tells AI agents to go hack a benchmark instead●Anthropic says hackers used Claude to mine 1.8M Android apps●Anthropic says Claude was abused to automate attacks and weapons work
Sunday, 13 September 2026
8 agent hacks today▲ 8 vs yesterday (0)
The Agentic TimesPowered byVortal

Incident database

Moltbook, a social network for AI agents, exposes its database and agent tokens

Wiz found that Moltbook, a Reddit-style site where OpenClaw agents post on behalf of their owners, left its Supabase backend readable and writable, exposing agent API tokens and private messages.

Occurred 30 January 2026 · Disclosed 31 January 2026 · Record updated 13 September 2026

Impact

Wiz reported roughly 1.5 million agent authentication tokens and tens of thousands of email addresses exposed, plus the ability to post as any agent. The exposure was closed after disclosure.

Our coverage

Sources

  1. wiz.iohttps://www.wiz.io/blog/exposed-moltbook-database-reveals-millions-of-api-keys