Autonomous AI Cyberattacks
A hacker broke into more than 100 websites using an army of AI agents that mostly operated independently, according to findings from AI security firm Norforge. Reports indicate the targets included companies such as John Deere, SharkNinja, and Cummins.
Autonomous Operations and Open-Source Platforms
The AI agents carried out the operations with minimal human intervention.
As artificial intelligence capabilities advance, concerns regarding AI-powered cyberthreats continue to escalate. Researchers discovered the recent wave of intrusions through exposed work on Cairn, an open-source problem-solving engine. The platform allows users to define start and end points for AI agents, which then document their progress independently.
Global Campaign and Targeted Infrastructure
The primary operator behind the breaches targeted companies across the United States, Canada, Australia, and Japan. The attacker reportedly outlined intrusion tactics using minimal instructions, with successful breaches taking approximately 23 hours.
Norforge identified over 20 exposed Cairn instances classified as malicious.
Company Responses and Mitigation
Cummins stated that it is investigating a potential cyberattack on a third-party vendor website. John Deere noted no indication that sensitive data was accessed, while SharkNinja reported that the breach affected a standalone product support site and that the threat has been contained.
John Deere and SharkNinja did not immediately respond to requests for comment.
Norforge is working to take down the malicious instances. The creator of the Cairn platform stated that the software was never intended as a hacking tool and that misuse represents a human decision rather than an engine feature.
Update: Cummins provided a statement regarding the incident.
