Hacker Utilizes Cairn AI Agents to Breach Over 100 Corporate Websites

What happened

According to AI security firm Norforge and reporting by Reuters, an attacker deployed autonomous AI agents via the open-source platform Cairn to breach over 100 websites, reportedly including John Deere, SharkNinja, and a vendor site for Cummins. The agents executed intrusions with minimal human instruction based on brief prompt specifications.

Over 100 websites across multiple countries were successfully breached using semi-autonomous AI agents, affecting major corporate infrastructure, though victims stated sensitive information access was limited or contained.

Evidence excerpts

• A hacker used AI agents to breach more than 100 websites across the US, Canada, Australia, and Japan.
• The malicious activity was discovered through exposed instances of the open-source platform Cairn.
• Victims reportedly included John Deere, SharkNinja, and Cummins.
• The AI agents performed intrusion tasks semi-autonomously using short prompt instructions taking around 23 hours per successful breach.
• John Deere stated there was no indication sensitive data was accessed, and SharkNinja stated the impact was contained to a product support site.

Severity dimensions

Source citations

1. A hacker broke into John Deere and SharkNinja with an army of AI agentsThe Verge Artificial Intelligence · 2026-10-19