A hacker broke into John Deere and SharkNinja with an army of AI agents

According to the AI security firm Norforge, a hacker breached more than 100 websites using an army of AI agents that mostly operated autonomously. While Norforge did not name the targets, Reuters reported that victims included John Deere, SharkNinja, and Cummins. The attacks were uncovered through exposed instances of Cairn, an open-source AI platform designed as a general-purpose problem-solving engine, which hackers repurposed to orchestrate cyberattacks. The most active attacker targeted companies in the US, Canada, Australia, and Japan, using fewer than 100 Chinese characters to lay out preferred intrusion tactics, with successful breaches taking about 23 hours. Norforge found over 20 exposed Cairn instances that are likely malicious and is working to get them taken down. John Deere said there is no indication sensitive information was accessed, Cummins is investigating the report, and SharkNinja said the breach impacted a standalone product support site and has been contained. Cairn's creator, @le1xia0, stated that the platform was never a hacking tool and that misuse is a human decision.

(Source：The Verge)