Hacker breaches John Deere and SharkNinja with an army of AI agents

AI security company Norforge found that a hacker breached more than 100 websites with the help of a cluster of mostly autonomous AI agents; according to Reuters, the victims include companies such as John Deere, SharkNinja and Cummins. Norforge discovered the attacks through tasks exposed on the open-source AI platform Cairn, which describes itself as a general-purpose problem-solving engine where users can set a starting point and an endpoint for agents, and the agents record task progress, but hackers can also use it to orchestrate cyberattacks. Reuters said the hacker is the most active attacker targeting companies in the United States, Canada, Australia and Japan, listed preferred intrusion methods in fewer than 100 Chinese characters, and took about 23 hours to successfully breach. Norforge also found more than 20 exposed Cairn instances that may be malicious and is pushing for them to be taken down.