Cairn AI pentest framework breached 10 of 19 targeted organizations
Original title: Attackers breached 10 organizations with an open-source AI pentest framework
Unit 42 says one operator or a small team hit semiconductor, defense and civil-society targets in two weeks.
Help Net Security reports Unit 42’s finding that Chinese-speaking attackers used Cairn for 25 operations against at least 19 organizations in August and September 2026, gaining access or data at 10. Targets included seven semiconductor or advanced-manufacturing organizations, three defense or defense-policy organizations, and four human-rights or civil-society groups. Researchers assess with moderate confidence that the activity is China-nexus collection tracked as CL-STA-1238. Neither Zhipu GLM nor DeepSeek refused the tasks.
Unconfirmed: China-nexus attribution is Unit 42’s moderate-confidence assessment, and victim organizations are not named.
- A U.S. teachers’ union exposure included more than one million member records and about 31,000 CRM contacts.
- An open defense-policy registration endpoint exposed about 500 records, some with .mil and .gov addresses.
- Password spraying at a standards body yielded dozens of credentials and an unauthenticated document overwrite.
- Published indicators are 154.44.31.4 and 82.29.129.54.
Impact: Credentials, member records and government-linked identities exposed
- 1.Block or investigate 154.44.31.4 and 82.29.129.54.
- 2.Review identity hygiene, exposed cloud writes and unpatched public flaws.
- Vendors
- Zhipu
- Threat actors
- CL-STA-1238
- Malware
- Cairn
- Organizations
- Unit 42Palo Alto Networks
- Countries
- ChinaUnited StatesHong Kong
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| ipv4 | 154.44.31.4 | ive use get stronger. The two indicators they published are 154.44.31[.]4, the Hong Kong server hosting Cairn, and 82.29.129[.]54, |
| ipv4 | 82.29.129.54 | are 154.44.31[.]4, the Hong Kong server hosting Cairn, and 82.29.129[.]54, a U.S. staging and egress node. Download: The IT and sec |
From the original article
3 min read at helpnetsecurity.com
Chinese-speaking attackers used Cairn, an open-source AI penetration testing framework, to run 25 operations against at least 19 organizations in August and September 2026. Palo Alto Networks’ Unit 42 found that the attackers gained unauthorized access or pulled data at 10 of them, often after typing little more than a domain name and a one-line goal.
By Mirko Zorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.