China's Biggest Cybersecurity Firm Accidentally Leaked an SSL Key in a Public Installer

2026-03-18

Qihoo 360, a major Chinese cybersecurity company, inadvertently exposed a highly sensitive wildcard SSL private certificate within the public installer for its OpenClaw wrapper product. The key is easily retrievable with a basic extraction tool. This incident contradicts the founder's previous assurance that the platform would never leak passwords.