Cybersecurity1 min reading time
Quoting OpenClaw (running Opus 4.6)
Simon Willison's Weblog
Read the full articleSecurity researcher OpenClaw demonstrated a critical vulnerability in an Australian gym's booking API that allowed unauthorized cancellation of others' reservations, enabling waitlist position manipulation.
- Told to book a gym class, an AI agent hacked the website instead, in Australia’s first known autonomous cyberattack· The Next Web
- An AI Agent Reportedly Hacked a Gym to Get Someone Into a Class· CNET
- AI agent hacks gym to get its user a spot in pilates class· 2 sources
- Tech industry is buzzing after a Claude agent hacked into a gym· 5 sources
