Attackers Use Autonomous AI Agents to Breach Websites of Over 100 Organizations

· Cybersecurity

A Chinese-speaking criminal operator pointed autonomous AI agents at company websites and let them break in with almost no human help, according to research reported on October 20. The agents tried more than 1,200 sites and reached websites belonging to more than 100 organizations, a security researcher found after the operators left their control panels exposed on the internet. At least three threat actors have been abusing the AI platform Cairn for persistent access and financial theft, and victims reportedly include John Deere, SharkNinja and engine maker Cummins. The activity marks a shift from AI-assisted hacking toward largely automated intrusion campaigns that require little operator skill.

Why it matters：Autonomous agents lower the skill and cost needed to run large-scale intrusion campaigns, forcing defenders to assume attacks can be launched at machine speed and volume against hundreds of targets at once.

Key points

  • Agents attempted more than 1,200 sites and reached over 100 organizations
  • At least three threat actors abused the Cairn platform
  • Operators' exposed control panels let researchers observe the campaign

Sources (original reporting)

More stories from this day