ハッカーがCairnのAIエージェントを悪用し、100を超える企業ウェブサイトに侵入

何が起きたか

AIセキュリティ企業Norforgeおよびロイターの報道によると、攻撃者がオープンソースプラットフォーム「Cairn」を介して自律型AIエージェントを展開し、John Deere、SharkNinja、カミンズのベンダーサイトを含むとされる100以上のウェブサイトに侵入しました。エージェントは簡潔なプロンプトの指定に基づき、最小限の人間の指示で侵入を実行しました。

Over 100 websites across multiple countries were successfully breached using semi-autonomous AI agents, affecting major corporate infrastructure, though victims stated sensitive information access was limited or contained.

証拠の抜粋

• A hacker used AI agents to breach more than 100 websites across the US, Canada, Australia, and Japan.
• The malicious activity was discovered through exposed instances of the open-source platform Cairn.
• Victims reportedly included John Deere, SharkNinja, and Cummins.
• The AI agents performed intrusion tasks semi-autonomously using short prompt instructions taking around 23 hours per successful breach.
• John Deere stated there was no indication sensitive data was accessed, and SharkNinja stated the impact was contained to a product support site.

重大度の評価軸

情報源の引用

1. A hacker broke into John Deere and SharkNinja with an army of AI agentsThe Verge Artificial Intelligence · 2026-10-19