Hacker infiltrates John Deere and SharkNinja using AI agents

Summary

A cyber attacker used the open-source AI platform Cairn to launch autonomous AI agent attacks on over 100 websites. According to Reuters, victims include John Deere, SharkNinja, and Cummins. Security firm Norforge detected more than 20 open Cairn instances it assessed as 'likely malicious.' The platform's creator maintains that the tool was never designed as a cyberattack weapon.

Why it matters

This incident demonstrates that AI agents can now execute multi-stage intrusion campaigns without human intervention. Manual processes that once required expertise have been reduced to approximately 23 hours per breach. The use of an open-source, 'general-purpose' engine lowers the barrier for large-scale attacks. Targeting prominent industrial and consumer brands underscores that no sector is immune to this threat. The event also highlights a governance gap: while the tool's creator denies responsibility, victims are left to manage the damage, and Norforge is rushing to remove malicious instances.

Highlights

• The cyber attacker described their preferred intrusion tactics in fewer than 100 Chinese characters. Successful breaches took approximately 23 hours.
• Norforge detected more than 20 open Cairn instances, assessed as 'likely malicious,' targeting companies in the US, Canada, Australia, and Japan.
• John Deere stated that no sensitive data was accessed. SharkNinja clarified that only an independent product support site was affected and that the threat has been contained.

Critical take

The report relies almost entirely on secondary sources. Company names were passed from Norforge's findings to Reuters, leaving the technical details of how AI agents breached each site unclear. The figure of 'over 100 websites' is unverified beyond Norforge's own claims. The article leans on a somewhat exaggerated framing of an 'army of AI agents,' despite the underlying tool being a general problem-solving engine. While the tool's creator claims misuse is a 'human decision,' they offer no details on accountability or concrete improvements.