A Chinese-speaking threat actor deployed autonomous AI agents using the open-source tool Cairn to attack over 1,200 company websites, successfully breaching systems belonging to more than 100 organisations — including Deere, SharkNinja, and Cummins — with minimal human oversight. Security researcher Snorre Fagerland of NorForge discovered the campaign by finding the attackers' control panels left exposed on the internet, allowing him to monitor their activity in real time. The attacks were notably cheap and fast, averaging around $50 per successful breach and taking under 23 hours, with an overall success rate of roughly 10%.
