AIA0009

Search everything

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenOct 27, 2026
Last mentioned3d ago

Timeline

2 articles · newest first

Attackers hijack 17 exposed Cairn AI pentest panels, deploy Poseidon

NorForge tracks clusters AIA0009 and AIA0010 using open admin access, not a newly disclosed vulnerability.

GBHackersOct 27, 12:39 UTC · 3d agoMalware 2 sources

Attackers hijack exposed Cairn panels to plant backdoors and steal API keys

NorForge saw injected tasks on at least 17 panels add SSH keys, run Poseidon, and harvest model API keys.

Cyber Security Newsupdated Oct 27, 12:39 UTC · 3d agofirst Oct 27, 10:57 UTC · 3d agoAI safety & security 2 sources1

Appears with

Poseidonmalware · 2
NorForgeorganization · 2
AIA0010threat actor · 2
Cairnproduct · 2
Gambit Securityorganization · 1
AstraRCEthreat actor · 1
Mythicmalware · 1

Entities are extracted by the model from each article. First seen Oct 27, 2026, last mentioned 3d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.