Hacker Uses AI Agent Army from Open‑Source Platform to Compromise 100+ Websites
Current overview (not historical)
A hacker leveraged the open‑source AI platform Cairn to orchestrate an army of AI agents that breached more than 100 websites, including major U.S. companies such as John Deere, SharkNinja, and Cummins. According to Norforge, the attacker was the most active user on the Cairn platform, targeting firms in the United States, Canada, Australia, and Japan. The attacks employed a "preferred intrusion tactic" that required fewer than 100 characters of code and typically took about 23 hours to succeed. The incident highlights the growing risk of AI‑driven attacks and the need for stronger safeguards around open‑source AI tools. The event underscores the potential for malicious actors to exploit publicly available AI platforms to automate large‑scale intrusion campaigns, raising concerns about the security of both the platforms themselves and the organizations they target.
Written with AI from the reporting · updated 10/19/2026
Expand the detailed fact route and sources
Story route
A station-by-station route from the first public evidence onward; every station carries its own evidence and uncertainty.
- 1Unclassified fact stationOct 19, 00:00recorded Oct 19, 22:14single sourcerevised
黑客利用AI代理攻破100多家网站
Read original source ↗ The Verge · AIReplay this moment in the explorerEvidence & revisions · 1 source records
- Subject：
- 黑客
- Action：
- 利用Cairn平台发动大规模网络攻击
- Object：
- John Deere、SharkNinja、Cummins等公司网站
- Occurred (fact side)：
- Oct 19, 00:00
- Published (valid side)：
- Oct 19, 21:58
- First seen (known side)：
- Oct 19, 22:14
Fact stationSingle source · one-sided claimRevisedCopy may have been revised later; time replay is bounded. Layer labels group reading only, not causation between layers.
Uncertainty marks flag where to check the sources; they are not proven causation.
Report timeline
Explore every side through dated source reports.
- The Verge · AIRelated fact: single sourceSource report revisedHacker uses AI agents to breach over 100 sites including John Deere and SharkNinja
Report first recorded Oct 19, 22:14
Security firm Norforge found that hackers used the open-source AI platform Cairn to orchestrate attacks on more than 100 websites. The attacks targeted major companies including John Deere, SharkNinja, and Cummins, with the most active attacker using fewer than 100 Chinese characters to outline intrusion tactics and achieving successful breaches in about 23 hours. Norforge identified over 20 exposed Cairn instances as likely malicious.
Read original source ↗
Event discussion
Reader opinions are hosted on GitHub Discussions; posting requires a GitHub account. Comments are not verified facts.