Hacker Breaches 100+ Sites With AI Agents as John Deere, SharkNinja Confirm Limited Impact
Updated
Updated · The Verge · Oct 19
Hacker Breaches 100+ Sites With AI Agents as John Deere, SharkNinja Confirm Limited Impact
1 articles · Updated · The Verge · Oct 19
Summary
More than 100 websites were breached by a single hacker using largely autonomous AI agents, with victims including John Deere, SharkNinja and Cummins, according to Norforge and Reuters.
Norforge traced the campaign to exposed instances of Cairn, an open-source AI platform whose agents can be assigned goals and left to document progress with little human involvement.
Fewer than 100 Chinese characters were enough to define the attacker’s preferred tactics, and successful breaches took about 23 hours across targets in the US, Canada, Australia and Japan.
John Deere said it sees no sign sensitive data was accessed, SharkNinja said a standalone product-support site was contained, and Cummins said it is investigating a possible attack on a vendor-run website.
More than 20 exposed Cairn instances were deemed likely malicious, underscoring rising concern that general-purpose AI tools can be repurposed for scalable cyberattacks.