Un hacker utiliza agentes de IA de Cairn para vulnerar más de 100 sitios web corporativos

Qué ocurrió

Según la empresa de seguridad de IA Norforge y un informe de Reuters, un atacante desplegó agentes autónomos de IA a través de la plataforma de código abierto Cairn para vulnerar más de 100 sitios web, incluidos, según se informa, John Deere, SharkNinja y el sitio de un proveedor de Cummins. Los agentes ejecutaron las intrusiones con una mínima intervención humana a partir de breves instrucciones en prompts.

Over 100 websites across multiple countries were successfully breached using semi-autonomous AI agents, affecting major corporate infrastructure, though victims stated sensitive information access was limited or contained.

Extractos de evidencia

• A hacker used AI agents to breach more than 100 websites across the US, Canada, Australia, and Japan.
• The malicious activity was discovered through exposed instances of the open-source platform Cairn.
• Victims reportedly included John Deere, SharkNinja, and Cummins.
• The AI agents performed intrusion tasks semi-autonomously using short prompt instructions taking around 23 hours per successful breach.
• John Deere stated there was no indication sensitive data was accessed, and SharkNinja stated the impact was contained to a product support site.

Dimensiones de severidad

Citas de fuentes

1. A hacker broke into John Deere and SharkNinja with an army of AI agentsThe Verge Artificial Intelligence · 2026-10-19