Home
360 Addresses Private Key Leak Incident, Cites Release Error and Urgent Certificate Revocation

Even seasoned veterans in the cybersecurity field can sometimes stumble. Recently, 360 Company's new AI offering, "360 Security Lobster," was found to have a critical, fundamental security oversight, raising widespread industry concerns about the rigor of AI product release cycles.
Reports indicate the issue stemmed from the product's installation package, which was discovered to contain the SSL private keys and certificates for the wildcard domain *.myclaw.360.cn. This is akin to leaving a master key out in the open. If obtained by an attacker, this private key could theoretically be used to impersonate a server, execute man-in-the-middle attacks, or intercept user data traffic.
Addressing the controversy, 360 Company responded swiftly, attributing the problem to a low-level procedural error during the release phase that accidentally bundled an internal domain certificate into the public installation package.
To mitigate the impact, 360 has implemented the following emergency actions:
Immediate Revocation: The compromised certificate has been revoked and is now entirely invalid.
Risk Assessment: The company states that ordinary users are not currently at risk, and technical measures have been deployed to block potential server forgery using the private key.
For a leading domestic cybersecurity firm like 360 to encounter such a security pitfall with its own AI product serves as a stark warning for the entire AI industry. Amid the current wave of frequent large model and intelligent agent releases, ensuring automated release checks are substantive, not merely procedural, has become a critical area for improvement.
Related article
Swedish AI Startup Lovable Eyes $13.2 Billion Valuation After Major Funding Round
As AI-driven coding tools gain traction, Swedish startup Lovable has secured a major funding round. The company aims to raise $3 billion, potentially boosting its valuation to $13.2 billion—double the $6.6 billion recorded last December. Menlo Ventur
Google Tests Remy AI Agent for Gemini as Focus Shifts to User Control
According to Business Insider, Google is testing Remy, a new AI personal agent for Gemini. This tool aims to execute tasks on behalf of users, streamlining both professional workflows and daily routines.Currently, Remy is undergoing testing in an int
How to fix Core Web Vitals for better SEO rankings
Streamline Report Card Comments with AI ToolsIntroductionAI Tools for Generating Report Card CommentsMagic SchoolAlmanac AIChat GPTUsing Magic School to Generate Report Card CommentsLogging into Magic SchoolSelecting the Report Card Comments ToolCust
Related Special Topic Recommendations
Comments (0)
0/500

Even seasoned veterans in the cybersecurity field can sometimes stumble. Recently, 360 Company's new AI offering, "360 Security Lobster," was found to have a critical, fundamental security oversight, raising widespread industry concerns about the rigor of AI product release cycles.
Reports indicate the issue stemmed from the product's installation package, which was discovered to contain the SSL private keys and certificates for the wildcard domain *.myclaw.360.cn. This is akin to leaving a master key out in the open. If obtained by an attacker, this private key could theoretically be used to impersonate a server, execute man-in-the-middle attacks, or intercept user data traffic.
Addressing the controversy, 360 Company responded swiftly, attributing the problem to a low-level procedural error during the release phase that accidentally bundled an internal domain certificate into the public installation package.
To mitigate the impact, 360 has implemented the following emergency actions:
Immediate Revocation: The compromised certificate has been revoked and is now entirely invalid.
Risk Assessment: The company states that ordinary users are not currently at risk, and technical measures have been deployed to block potential server forgery using the private key.
For a leading domestic cybersecurity firm like
Swedish AI Startup Lovable Eyes $13.2 Billion Valuation After Major Funding Round
As AI-driven coding tools gain traction, Swedish startup Lovable has secured a major funding round. The company aims to raise $3 billion, potentially boosting its valuation to $13.2 billion—double the $6.6 billion recorded last December. Menlo Ventur
How to fix Core Web Vitals for better SEO rankings
Streamline Report Card Comments with AI ToolsIntroductionAI Tools for Generating Report Card CommentsMagic SchoolAlmanac AIChat GPTUsing Magic School to Generate Report Card CommentsLogging into Magic SchoolSelecting the Report Card Comments ToolCust











