Security research firm NorForge on October 19, 2026 published Inside Cairn, an investigation that identified more than 20 publicly exposed control panels for the Cairn AI problem-solving harness as likely associated with...

NorForge researchers report that attackers compromised at least 17 internet-exposed Cairn AI penetration-testing panels, using the panels' own agents to steal credentials and API keys, install unauthorized SSH keys and deploy malware (a Poseidon implant). Only one of the two provisional clusters,…

Security research firm NorForge on October 19, 2026 published Inside Cairn, an investigation that identified more than 20 publicly exposed control panels for the Cairn AI problem-solving harness as likely associated with...

NorForge found threat actors had left Cairn control panels exposed and identified three apparently malicious clusters focused on persistent access and financial theft. The largest, Chinese-language cluster ran 1,100+ attack projects across 14 dashboards. Reuters reports that this cluster breached…

What Happened The latest developments point to a practical shift: AI capabilities are becoming easier to deploy, while security, distribution and liability constraints are becoming harder to ignore. AI-enabled attacks…

AI hackers broke into 100+ sites for $50 each in October 2026. Here's how AI hacking works and 10 checks to protect your app before agents reach it.

NorForge found the Cairn campaigns because attackers left 25 panels open, leaking targets, credentials, and admin controls.

NorForge research into publicly exposed Cairn AI pentesting panels: how threat actors select targets, direct autonomous agents, exploit vulnerabilities, and expose their victims' secrets in the proces...

A single attacker spent roughly $5,000 total to breach more than 100 company websites, using autonomous AI agents that needed fewer than 100 characters of instruction to find vulnerabilities and plan…

TL;DR Security researchers discovered more than 20 unsecured control dashboards for the Cairn AI hacking tool left open on the public internet. These exposed Cairn AI panels revealed over 1,100 automated attack projects targeting online retailers and payment systems worldwide. Because the operators failed to password-protect their dashboards, investigators uncovered stolen victim secrets. In addition, they found the attackers' own server credentials.

Los agentes de IA de pentesting quedaron convertidos en el objetivo. Al menos 17 paneles expuestos de Cairn, la plataforma que coordina agentes autónomos para pruebas de penetración, recibieron tareas maliciosas que robaron credenciales, instalaron llaves de acceso no autorizadas y descargaron un programa espía. La herramienta pensada para atacar redes ajenas con permiso terminó atacando la casa propia. NorForge, firma dedicada a la seguridad de agentes autónomos, documentó la campaña en un informe técnico publicado este 27 de octubre y compartido con GBHackers. La actividad fuerte arrancó el 20 de octubre, con rastreos que podrían venir del 10 de octubre.

A researcher at security firm NorForge has discovered that a Chinese-speaking criminal launched autonomous AI agents through Carin, a...

A researcher at security firm NorForge has discovered that a Chinese-speaking criminal launched autonomous AI agents through Carin, a...

A researcher at security firm NorForge has discovered that a Chinese-speaking criminal launched autonomous AI agents through Carin, a...

A researcher at security firm NorForge has discovered that a Chinese-speaking criminal launched autonomous AI agents through Carin, a...

A researcher at security firm NorForge has discovered that a Chinese-speaking criminal launched autonomous AI agents through Carin, a...

Exposed Cairn panels reveal autonomous AI attacks on over 1,200 websites, with confirmed breaches and leaked credentials.

A cybercriminal used AI agents to commit a string of attacks against more than 100 different companies — an alarming incident that shows how autonomous agents with advanced AI hacking capabilities have exponentially raised the threat that a single human hacker can pose. As Reuters first reported, a threat researcher at the cybersecurity company NorForge discovered that a Chinese-speaking hacker had used autonomous agents to carry out the mass hacking spree, which impacted global companies including John Deere, SharkNinja, and Cummins, among dozens of others. The hacker isn’t alone. According to Snorre Fagerland, the researcher who discovered the Deere and SharkNinja hacker, the cybercriminal is one of several malicious actors who have abused an open source AI tool called Cairn to send swarms of agents on autonomous hacking sprees. “It’s ​a new world now,” Fagerland, who detailed his findings in a report, told Reuters. One of the Cairn-assisted hackers who Fagerland observed was able to make away with sensitive credit card information, according to the report. The Chinese speaking hacker was the most aggressive, per Reuters. They deployed AI systems against over 1,200 US, Canadian, Australian and Japanese ​e-commerce sites, with successful breaches occurring after the AI agents attacked different...

サイバーセキュリティ企業NorForgeは2026年10月19日、ハッカーがAIエージェントを駆使して米国・カナダ・オーストラリア・日本の企業100社超のウェブサイトへの侵入に成功していたとの調査報告を公表しました。