黑客利用 Cairn AI 智能体入侵逾 100 个企业网站

发生了什么

据人工智能安全公司 Norforge 称以及路透社报道，一名攻击者通过开源平台 Cairn 部署了自主 AI 智能体，入侵了 100 多个网站，据报道其中包括约翰迪尔（John Deere）、SharkNinja 以及康明斯（Cummins）的一家供应商网站。这些智能体根据简短的提示规范，在极少的人工指令下实施了入侵。

Over 100 websites across multiple countries were successfully breached using semi-autonomous AI agents, affecting major corporate infrastructure, though victims stated sensitive information access was limited or contained.

证据摘录

• A hacker used AI agents to breach more than 100 websites across the US, Canada, Australia, and Japan.
• The malicious activity was discovered through exposed instances of the open-source platform Cairn.
• Victims reportedly included John Deere, SharkNinja, and Cummins.
• The AI agents performed intrusion tasks semi-autonomously using short prompt instructions taking around 23 hours per successful breach.
• John Deere stated there was no indication sensitive data was accessed, and SharkNinja stated the impact was contained to a product support site.

严重度维度

来源引用

1. A hacker broke into John Deere and SharkNinja with an army of AI agentsThe Verge Artificial Intelligence · 2026-10-19