Hacker used Cairn AI agents to break into more than 100 sites
Original title: A hacker broke into John Deere and SharkNinja with an army of AI agents
Reuters names John Deere, SharkNinja and Cummins; Deere says no sensitive information was accessed.
Norforge says a hacker broke into more than 100 websites with AI agents that mostly ran on their own, using exposed instances of the open-source Cairn platform. Reuters reports victims included John Deere, SharkNinja and Cummins, with attacks aimed at companies in the US, Canada, Australia and Japan. John Deere said there is no indication sensitive information was accessed; SharkNinja said a standalone support site was affected and contained; Cummins said it is investigating a possible attack on a third-party vendor site.
Unconfirmed: Norforge did not name targets; victim names and tactic details come from Reuters, and companies dispute or are still checking impact.
- Norforge found more than 20 exposed Cairn instances it calls likely malicious.
- The most active attacker set tactics in fewer than 100 Chinese characters, Reuters reported.
- Successful breaches took about 23 hours, according to Reuters.
- SharkNinja said the hit site held product support information.
- Norforge says it is working to have the malicious Cairn instances taken down.
Impact: Unauthorized access to company websites
- Products
- Cairn
- Victims
- John DeereSharkNinjaCummins
- Organizations
- Norforge
- Countries
- United StatesCanadaAustraliaJapan
From the original article
2 min read at theverge.com
A hacker broke into more than 100 websites using an army of AI agents that mostly operated on their own, according to findings from the AI security firm Norforge. Though Norforge doesn't name the targets, Reuters reports that the victims included companies like John Deere, SharkNinja, and Cummins.
By Emma Roth · theverge.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.