Ankura CTIX FLASH Update – March 3, 2026

Malware Activity

Emerging Threats and Vulnerabilities in Modern Technology

Recent security findings highlight critical vulnerabilities and advanced hacking techniques targeting both AI platforms and isolated systems. Researchers uncovered "ClawJacked," a flaw in the popular self-hosted AI platform OpenClaw, which allowed malicious websites to silently connect and guess management passwords through its WebSocket interface, risking complete control over the AI system. This vulnerability was caused by insufficient protection against brute-force attacks on local connections and was promptly patched in February 2026. Meanwhile, North Korean hackers linked to APT37 have developed sophisticated methods to secretly transfer data from air-gapped systems (computers disconnected from the internet) using infected USB drives and malicious scripts. Their campaign, dubbed Ruby Jumper, employs fake shortcut files and specialized malware to turn removable drives into