Un pirate informatique utilise des agents d'IA Cairn pour pirater plus de 100 sites web d'entreprises

Ce qui s’est passé

Selon l'entreprise de sécurité en IA Norforge et des informations rapportées par Reuters, un pirate a déployé des agents d'IA autonomes par l'intermédiaire de la plateforme open-source Cairn pour pirater plus de 100 sites web, parmi lesquels figureraient John Deere, SharkNinja et le site d'un fournisseur de Cummins. Les agents ont exécuté les intrusions avec un minimum d'instructions humaines, à partir de brèves spécifications de prompts.

Over 100 websites across multiple countries were successfully breached using semi-autonomous AI agents, affecting major corporate infrastructure, though victims stated sensitive information access was limited or contained.

Extraits de preuves

• A hacker used AI agents to breach more than 100 websites across the US, Canada, Australia, and Japan.
• The malicious activity was discovered through exposed instances of the open-source platform Cairn.
• Victims reportedly included John Deere, SharkNinja, and Cummins.
• The AI agents performed intrusion tasks semi-autonomously using short prompt instructions taking around 23 hours per successful breach.
• John Deere stated there was no indication sensitive data was accessed, and SharkNinja stated the impact was contained to a product support site.

Dimensions de sévérité

Sources citées

1. A hacker broke into John Deere and SharkNinja with an army of AI agentsThe Verge Artificial Intelligence · 2026-10-19