theverge.comarticleA hacker broke into John Deere and SharkNinja with an army of AI agents
The Verge reports Norforge findings that one hacker used autonomous AI agents on the open-source Cairn platform to breach more than 100 websites in the US, Canada, Australia and Japan. Reuters named John Deere, SharkNinja and Cummins as victims. Norforge found over 20 likely malicious exposed Cairn instances, with breaches taking about 23 hours; the attacker's tactics were written in under 100 Chinese characters. Cairn's creator says misuse is a human decision.
TL;DR Reports an attacker using autonomous Cairn AI agents to breach 100+ sites, including John Deere, SharkNinja and Cummins vendor sites.
Organisations named here
- le1xia0
- Norforge
- Reuters
Technologies named here
- John Deere
- Norforge
- SharkNinja
- Cummins
- CAIRN
Techniques named here
- Autonomous AI-agent-driven intrusion
Related in Threat Intel
huntress.comwriteupReverse Engineering the Six Stages of MacSync Stealer and RAT
huntress.comwriteupAI-Coded Malware | Analyzing Vibe-Coded AD Enumeration | Huntress
blog.talosintelligence.comtoolIntroducing CAIRN: Frontier tracking for AI-integrated malware (Cisco Talos)
huntress.comwriteup