Executive Summary
A roundup including Iran tracking US military phones, CrashStealer macOS malware, OpenClaw AI agents exploited via WhatsApp, ransomware at TKMS and a Lidl breach.
What Happened
Noteworthy stories that might have slipped under the radar: OpenClaw AI agents exploited via WhatsApp, ransomware hits naval defense firm TKMS, Lidl discloses data breach. The post In Other News: Iran Tracks US Military Phones, CrashStealer macOS Malware, CVD Blueprint appeared first on SecurityWeek .
Affected Products
- OpenClaw
Vulnerability / Attack Technique
Multiple, including AI agents exploited via WhatsApp messages
Technical Mechanism
The summary lists stories without technical detail.
AI Security Category
LLM01:2025 Prompt Injection
Part of the Prompt Injection topic.
Relevant Frameworks
RealGround Analysis
Messaging apps connected to agents are injection channels. RealGround analysis: agents reachable via WhatsApp should only accept trusted senders.
Recommended Controls
- Restrict which contacts can message an AI agent
Related RealGround Service
Secure AI Agent Build · or start with the free AI Agent Security Scanner.
Sources
securityweek.com: https://www.securityweek.com/in-other-news-iran-tracks-us-military-phones-crashstealer-macos-malware-cvd-blueprint/
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.