Attackers use AI pen-test tool Cairn against e-commerce sites
NorForge says a Chinese-speaking operator ran over 1,100 projects across dashboards aimed at stealing payments.
74
Victim
SharkNinja
- Mentions · 7d6
- Mentions · 30d6
- All mentions6
- First seenOct 19, 2026
- Last mentioned5d ago
Timeline
6 articles · newest firstAutonomous AI agents used to breach more than 1,200 websites
NorForge says exposed Cairn panels tied a Chinese-language cluster to web shells at named firms, with data theft unconfirmed.
78
Attackers used open-source Cairn against over 100 organizations
Norforge found three exposed-panel clusters; Reuters names John Deere and SharkNinja, and about 10% of attempts succeeded.
78
AI-agent campaign breached websites at more than 100 companies
NorForge tracked campaign AIA0001 across 14 dashboards; Deere, SharkNinja and Cummins were named.
78
AI agents tied to breaches of more than 100 company websites
NorForge estimates about $5,000 in tokens for a campaign that tried more than 1,200 sites, mostly online stores.
76
Hacker used Cairn AI agents to break into more than 100 sites
Reuters names John Deere, SharkNinja and Cummins; Deere says no sensitive information was accessed.
74
Appears with
- Norforgeorganization · 6
- Cairnproduct · 6
- Cumminsvictim · 5
- Deerevictim · 3
- John Deerevictim · 3
- Playwrightproduct · 2
- AIA0001threat actor · 2
- Zend Frameworkproduct · 1
- DeepSeekai model · 1
- memcachedproduct · 1
- Microsoftvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.