xAI now lets Grok and X Premium subscribers use Grok models directly inside OpenClaw without a separate API key. Here's how to set it up using OAuth or the classic API key method, which model to pick, ...

A VS Code vulnerability in GitHub.dev lets attackers steal full GitHub OAuth tokens via a single malicious link, exposing all private repositories.

GitHub revealed today that an attacker is using stolen OAuth user tokens (issued to Heroku and Travis-CI) to download data from private repositories. Since this campaign was first spotted on April 12, ...

PCWorld reports that Anthropic and Google are banning users who connect flat-rate Claude and Gemini accounts to OpenClaw without warning or refunds. OpenClaw’s massive token consumption degrades ...