AI Agent 'Lobster Fever' Grips China Despite Risks

A man wears a lobster hat that represents the OpenClaw logo, an open-source AI assistant at the Baidu headquarters in Beijing on March 11, 2026. (Photo by ADEK BERRY / AFP)
A man wears a lobster hat that represents the OpenClaw logo, an open-source AI assistant at the Baidu headquarters in Beijing on March 11, 2026. (Photo by ADEK BERRY / AFP)
TT

AI Agent 'Lobster Fever' Grips China Despite Risks

A man wears a lobster hat that represents the OpenClaw logo, an open-source AI assistant at the Baidu headquarters in Beijing on March 11, 2026. (Photo by ADEK BERRY / AFP)
A man wears a lobster hat that represents the OpenClaw logo, an open-source AI assistant at the Baidu headquarters in Beijing on March 11, 2026. (Photo by ADEK BERRY / AFP)

Chinese entrepreneur Frank Gao used to spend long hours running his social media accounts but now outsources the chore to AI agent tool OpenClaw, which is taking the country by storm despite official warnings over cybersecurity.

OpenClaw, created in November by an Austrian coder, differs from bots like ChatGPT because it can execute real-life tasks such as sending emails, organizing files or even booking flight tickets.

"Since January, I've spent hours on the lobster every day," Gao told AFP, referring to OpenClaw's red crustacean mascot. "We're family."

After downloading OpenClaw, users connect it to existing artificial intelligence models of their choice, then give it simple instructions through instant messaging apps, as if to a friend or colleague.

The tool has fascinated tech circles worldwide but particularly in China, gripping tech-savvy companies and individuals keen to keep up with the next big thing in AI.

Hundreds of people queued at tech giant Baidu's Beijing headquarters this week for an OpenClaw event where engineers helped attendees set up their "little lobsters".

It was one of many similar meetups to experiment with the tool, which are drawing crowds from Shanghai to Shenzhen.

Some municipalities, including the eastern cities of Wuxi and Hangzhou, have pledged hundreds of thousands of dollars to support the adoption and development of OpenClaw and other AI agents.

But the lobster fever, as it has been dubbed, has also sparked security concerns.

"What's truly scary about agents like OpenClaw is this: once they have your digital keys, they can theoretically access all the services you've authorized, and can autonomously decide when to activate them," Gao warned.

"The attacker effectively gains a 'master key' to your digital identity," said the engineer, who has named his OpenClaw agent "Q" after his business name QLab.

- 'Use with caution' -

Chinese national cybersecurity authorities and Beijing's ministry of industry and IT have warned of the risks of OpenClaw hacks.

"Use intelligent agents such as 'lobster' with caution," national IT research institute expert Wei Liang advised government agencies, public institutions, companies and individuals in a message on state media.

The mixed signals of rolling out policy incentives while issuing warnings "reflects the authorities' cautious tolerance towards 'lobster fever'," Zhang Yi, founder of tech consultancy iiMedia, told AFP.

Austrian programmer Peter Steinberger, who built OpenClaw to help organize his digital life, was hired last month by ChatGPT maker OpenAI.

Meanwhile, a separate team of coders that made Moltbook, a Reddit-like pseudo social network where OpenClaw agents converse, are joining Meta.

Top Chinese tech companies have also been quick to get involved.

The likes of Tencent, Alibaba, ByteDance and Baidu are offering simplified installation and affordable coding plans to help users who want to host OpenClaw agents on their cloud servers -- seen as safer than downloading it onto a personal computer.

In recent days AI companies big and small have also launched their own competing agent tools, such as ByteDance's ArkClaw, Tencent's WorkBuddy and Zhipu AI's AutoClaw.

The relatively low cost for cloud deployment of OpenClaw in China, subsidised by big tech firms, is one factor behind its popularity, said Gao Rui, a senior product manager at Baidu AI Cloud.

"For most people, it's likely just the price of a cup of coffee... which is why people will probably be keen to give it a try," she told AFP.

- FOMO -

Fear of missing out is also a big driver behind OpenClaw's success in China, said Chen Yunfei, an AI developer who created a popular online guide for using the tool.

"Most Chinese people are quite studious and forward-looking, so when confronted with new things, they might have stronger feelings" of so-called FOMO, he said.

Xie Manrui, a programmer whose latest project is a visualized system for managing OpenClaw agents, said the tool had arrived "at the right moment" to change perceptions in China of what AI can do.

"For many, AI is merely a clever chatbot that talks all the time but cannot act," he said.

Either way, it has piqued the curiosity of many young users.

At the Baidu event in Beijing, 24-year-old college student Zheng Huimin was waiting patiently in line with her friends.

"I'd like to give it a go to see what tasks it can actually help me accomplish," she told AFP.



From Carnegie to Claude: AI Wealth Could Reshape Philanthropy

Anthropic, the maker of the Claude chatbot, will commit 5 percent of its shares to a new public benefit fund. ANDREJ IVANOV / AFP
Anthropic, the maker of the Claude chatbot, will commit 5 percent of its shares to a new public benefit fund. ANDREJ IVANOV / AFP
TT

From Carnegie to Claude: AI Wealth Could Reshape Philanthropy

Anthropic, the maker of the Claude chatbot, will commit 5 percent of its shares to a new public benefit fund. ANDREJ IVANOV / AFP
Anthropic, the maker of the Claude chatbot, will commit 5 percent of its shares to a new public benefit fund. ANDREJ IVANOV / AFP

A wave of American wealth created by artificial intelligence companies could produce some of the largest charitable sums since the era of Andrew Carnegie and John D. Rockefeller, raising questions about where the money goes.

Anthropic, the maker of the Claude chatbot, has said it would commit 5 percent of its shares to a new Anthropic Public Benefit Fund, a stake that could be worth around $100 billion if the company reaches the $2 trillion valuation investors are eyeing for a stock market debut expected as early as November, reported AFP.

Combined with pledges by its seven co-founders to give away 80 percent of their equity and a program matching employees' donations, Anthropic says roughly a fifth of its shares will be dedicated to public-benefit purposes.

"This might be one of the biggest stories in corporate philanthropy ever," said Michael Moody, a professor of philanthropic studies at Indiana University's Lilly Family School of Philanthropy.

The OpenAI Foundation, the nonprofit that controls ChatGPT maker OpenAI, holds a 26 percent stake in the company that was valued at about $130 billion when it was restructured a year ago, more than the endowment of the Gates Foundation.

Nan Ransohoff of payments firm Stripe has described the moment as a "third wave" of American philanthropy, after the industrial fortunes of the late 19th century and the internet billionaires of recent decades.

- 'Dies disgraced' -

Carnegie argued in his 1889 essay "The Gospel of Wealth" that "the man who dies thus rich dies disgraced," and by his death had given away the bulk of his fortune, about $350 million.

Carnegie transferred what remained into a trust, which has continued to make grants for more than a century.

Rockefeller's money built universities and funded medical research and public health campaigns around the world.

Railroad magnate Cornelius Vanderbilt gave comparatively little, apart from the $1 million that founded the university bearing his name.

Anthropic is setting up its fund as a limited liability company that it wholly owns, rather than as a nonprofit foundation, which must pay out a minimum share of its assets each year and file public tax returns.

"The trade-off is that decision-making stays with the company and transparency is voluntary," said Sarah Wolfolds, who studies nonprofit organizations at Cornell University's SC Johnson College of Business.

Anthropic has said the fund's equity will not be used for lobbying or political giving and that it will report on its activities.

- 'Where the money is' -

Many Anthropic founders and staff have close ties to effective altruism, a movement that favors causes such as AI safety and global health because of their measurable impact.

"Nonprofits tend to reorient their programs toward where the money is," Wolfolds said, warning that other causes can become neglected.

Moody said the philanthropic world would be "looking closely at which causes they support," including whether research funding is limited to AI.

Laura McGarry, of fundraising consultancy Graham-Pelton, said the charities best placed to benefit are those that already have relationships with the newly wealthy.

"It's really about values alignment," she said, adding that charities that court the newly rich only after their big payday risk looking transactional.

Effective altruism has shaped some donors' giving but has not "dramatically upset the apple cart," she said.

Anthropic has said the fund could make payments directly to groups affected by AI's impact on jobs, without giving details.

Research on cash transfers is encouraging, Wolfolds said, but "the harder challenge may be identifying who has been affected by AI."

Such payments should complement, not replace, unemployment insurance and retraining programs, she said.

- One child, one share -

Elon Musk, the world's richest person, whose SpaceX owns rival AI developer xAI, criticized Anthropic's approach.

"I recommend giving the shares directly to the public," he wrote on X.

As an alternative, Musk pledged one of his SpaceX shares to every American child next year, a gift worth about $10.5 billion.

US President Donald Trump praised the move as fitting the philosophy behind his "Trump Accounts," government-backed investment accounts for children born between 2025 and 2028. Billionaires Michael and Susan Dell have pledged billions to the program.


'Tech Debt Coming Due': AI-found Flaw Signals Chaos Ahead

Michael Daniel is president of the Cyber Threat Alliance and was a White House cybersecurity coordinator under former US president Barack Obama. BRENDAN SMIALOWSKI / AFP
Michael Daniel is president of the Cyber Threat Alliance and was a White House cybersecurity coordinator under former US president Barack Obama. BRENDAN SMIALOWSKI / AFP
TT

'Tech Debt Coming Due': AI-found Flaw Signals Chaos Ahead

Michael Daniel is president of the Cyber Threat Alliance and was a White House cybersecurity coordinator under former US president Barack Obama. BRENDAN SMIALOWSKI / AFP
Michael Daniel is president of the Cyber Threat Alliance and was a White House cybersecurity coordinator under former US president Barack Obama. BRENDAN SMIALOWSKI / AFP

Companies and government agencies rushed this week to patch two critical flaws in PHP, the programming language that runs a large share of the world's websites.

The vulnerability to potential hackers was found by using a powerful model from OpenAI in one of the most high-profile demonstration of AI's cyber capabilities.

AFP spoke with Michael Daniel, president of the Cyber Threat Alliance and a former White House cybersecurity coordinator under former US president Barack Obama, about what the episode means as AI tools find software flaws faster than ever.

The interview has been edited for length and clarity.

Q: What does the PHP episode tell us?

A: This is the beginning of a pretty chaotic period, given the abilities of the advanced models. I've been saying for years that the logical conclusion of these AI models being able to find vulnerabilities at speed and at scale is that there's going to be a flood of these vulnerabilities.

Rob Joyce [former cybersecurity director at the US National Security Agency] has referred to it as the great cleansing forest fire of old software. I've talked about our tech debt coming due.

The incentives have been for people to keep software as long as possible, and we don't really factor these risks into the cost of having the software. You're not incurring a direct cost on your books for this old software, but in reality you are, only it's an implicit cost until something like this happens.

Q: What should organizations be doing?

A: Preparing to get your software updated, be prepared to keep it updated, and be prepared to implement patches when they come out.

There's going to be a flood of vulnerabilities, a flood of patches and a flood of mitigations, and not all of them will be created equal.

For a lot of smaller organizations that don't have a lot of internal capacity, what you've got to do is shift your organization to be able to accept the vendor updates as fast as you can.

Q: Is every flaw dangerous?

A: Historically, the exploitation rate for vulnerabilities has been five or six percent, and there's no indication that number is going up. But now when bad guys exploit a vulnerability, they're able to do so much more quickly.

It used to take a month or two for a proof of concept to come out, and then another month or two for it to show up in exploit kits (used by bad actors). That's now measured in hours or days.

Q: What does that mean for large companies?

A: Most businesses essentially ran a zero-risk tolerance for breaking things, so they would test the hell out of a patch before they put it into production. Now they don't have that time.

If the risk of breaking something by putting this patch into place is one percent, but the risk of being attacked could cost me 50 million dollars...now I've got an interesting trade-off.

Q: Are advanced AI tools reliable at finding real flaws?

A: There's a lot of noise. The PHP one is a prime example of a real one, but there's an awful lot out there that are either not real or are on software that's never exposed to the internet. We've got to improve our triage system.

Q: Where does this lead us in two or three years?

A: We're going to turn these AI tools on software that hasn't been deployed yet, so one would hope we start to deploy software that has fewer vulnerabilities to begin with. You burn out all the old stuff, and it makes way for new growth that's more secure from the beginning.

It's not like this solves our cybersecurity problem, but it does change the nature of it going forward.


CEO: Amazon Cloud Capacity Sold Out Through 2027

FILE PHOTO: Amazon CEO Andy Jassy speaks during an Amazon Devices launch event in New York City, US, February 26, 2025. REUTERS/Brendan McDermid/File Photo
FILE PHOTO: Amazon CEO Andy Jassy speaks during an Amazon Devices launch event in New York City, US, February 26, 2025. REUTERS/Brendan McDermid/File Photo
TT

CEO: Amazon Cloud Capacity Sold Out Through 2027

FILE PHOTO: Amazon CEO Andy Jassy speaks during an Amazon Devices launch event in New York City, US, February 26, 2025. REUTERS/Brendan McDermid/File Photo
FILE PHOTO: Amazon CEO Andy Jassy speaks during an Amazon Devices launch event in New York City, US, February 26, 2025. REUTERS/Brendan McDermid/File Photo

Amazon CEO Andy Jassy said on Friday that Amazon Web Services' cloud computing capacity is largely sold out through 2027, with significant commitments extending into 2028, on growing demand for AI infrastructure.

In a video podcast with Andreessen Horowitz co-founder Ben Horowitz and general partner Erik Torenberg, Jassy said Amazon is struggling to keep pace ⁠with the insatiable ⁠demand from AI labs and enterprises.

Earlier this year, Amazon had said it would spend about $220 billion in capital expenditure for 2026.

According to Reuters, Jassy said the ⁠company "could invest a lot more and it wouldn't be a bad use of capital," considering cloud-computing capacity for 2026 is already sold out.

"2027 is largely sold out. We always leave a certain amount for on demand and our inference service bedrock, or EC2, but largely sold out ⁠all ⁠the big chunks. A good chunk of 2028 is sold out," he said.

EC2 is an AWS service that provides cloud servers for running applications, while Bedrock gives customers access to AI models to build generative AI applications.

Amazon is scheduled to report third quarter results on October 29.