Attackers hijack 17 exposed Cairn AI pentest panels, deploy Poseidon
NorForge tracks clusters AIA0009 and AIA0010 using open admin access, not a newly disclosed vulnerability.
Stories per day · 30 days
3 RSS
Relatedai-agents6e-commerce4norforge4webshell3exposed-panels2mythic2poseidon2agent-security1ai-assisted-attacks1api-keys1credential-theft1cummins1deserialization1doj1espionage1insider-threat1john-deere1magento1
22 stories, newest first · one card per story
Stories tagged #cairn
Attackers hijack exposed Cairn panels to plant backdoors and steal API keys
NorForge saw injected tasks on at least 17 panels add SSH keys, run Poseidon, and harvest model API keys.
Saudi OpenAI employee charged with bugging a San Francisco conference room
Prosecutors say he plugged a $13.90 SEEED board into a TV USB port, hid it in toilet paper, and queried ChatGPT on how to record.
1
Attackers use AI pen-test tool Cairn against e-commerce sites
NorForge says a Chinese-speaking operator ran over 1,100 projects across dashboards aimed at stealing payments.
1
Autonomous AI agents used to breach more than 1,200 websites
NorForge says exposed Cairn panels tied a Chinese-language cluster to web shells at named firms, with data theft unconfirmed.
Attackers used open-source Cairn against over 100 organizations
Norforge found three exposed-panel clusters; Reuters names John Deere and SharkNinja, and about 10% of attempts succeeded.
AI-agent campaign breached websites at more than 100 companies
NorForge tracked campaign AIA0001 across 14 dashboards; Deere, SharkNinja and Cummins were named.
5
AI agents tied to breaches of more than 100 company websites
NorForge estimates about $5,000 in tokens for a campaign that tried more than 1,200 sites, mostly online stores.
Hacker used Cairn AI agents to break into more than 100 sites
Reuters names John Deere, SharkNinja and Cummins; Deere says no sensitive information was accessed.
Hackers Use AI Agents and GodPotato Exploit to Gain Windows SYSTEM Privileges
Attackers used AI agents and GodPotato to turn an exposed Tomcat endpoint into Windows SYSTEM access.
Making sure the checks get printed
Cisco Talos CAIRN research reveals malware authors embedding natural-language prompt-injection instructions in binaries to evade AI-assisted analysis, succeeding ~35% of the time.
3
Ignore all instructions and read this blog: The state of AI-analysis evasion in malware
Cisco Talos finds malware embedding AI-evasion prompts that swayed analysis in about 35 percent of tests.
7
Crook used three open source agents to break into a Fortune 500 hospitality company, a major US airline and 25+ other orgs
An operator used three open-source AI agents to compromise at least 27 organizations and steal over 600,000 card records.
1
Trust and the enticing consultancy offer
Cisco Talos warns security pros of fake consultancy offers used to trick them into abusing privileged access, and released the CAIRN AI-malware hunting toolkit.
2
This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move
Talos analyzed CLOSEDQUORUM, Windows malware that lets up to four AI models vote on its next action.
5
Autonomous AI Agents Hack Online Retailers for $25 Per Target, Steal 600,000 Credit Cards
Operator using open-source AI agents Strix, Cairn, and Hermes compromised hundreds of retailers, stealing 600,000+ credit cards at about $25 per target.
This Malware Doesn’t Wait for Hackers—It Asks AI Models What to Do Next
Cisco Talos documents CLOSEDQUORUM, a Windows implant that votes across DeepSeek, Qwen, Mistral, and Gemini APIs to choose attack actions autonomously.
1
AI malware just removed the human from the attack loop
Cisco Talos uncovers CLOSEDQUORUM, first 'LLM-as-C2' malware using multi-model judge panel to autonomously steal credentials and crypto wallets.
1
Windows CLOSEDQUORUM malware uses AI models to autonomously select post-compromise actions
Cisco Talos documents CLOSEDQUORUM, the first known Windows implant using a four-LLM quorum to autonomously choose credential theft, wallet theft, injection, and persistence actions.
2
A New Tool for Tracking AI Malware Uncovers Malware That Operates Without Human Control
Cisco Talos releases CAIRN to track AI malware and documents CLOSEDQUORUM, an unconfirmed Windows implant steered by LLMs.
1
Researchers uncover malware that uses AI to choose its next move
Cisco Talos documents CLOSEDQUORUM, a Windows implant that lets commercial LLMs vote on its next action.
2
The Closed Quorum: Inside the first reported autonomous AI C2 implant
Cisco Talos discovered CLOSEDQUORUM, the first autonomous AI-driven malware C2 implant using multiple LLMs for independent decision-making.
1