// AI threat desk · 21 Oct 2026
Home/AGENT · Agent Security
Agent SecurityHighCAIRNCVSS not assigned

Cairn AI agents tried more than 1,200 websites

Reuters said autonomous Cairn agents tried more than 1,200 sites and reached websites belonging to more than 100 companies. NorForge disclosed the findings on Oct 19, 2026.

· 2 min read
AI-generated image of security analysts monitoring blurred browser dashboards and alerts in a dim operations centre.
AI-generated image, not a photo of the event.
Key takeaways
  • Reuters said Cairn agents tried more than 1,200 sites and reached websites belonging to more than 100 companies.
  • The AIA0001 cluster targeted organizations mainly in the US, Japan and Australia, with the apparent aim of gaining persistent access to e-commerce and payment infrastructure.
  • More than 20 exposed Cairn panels revealed target data and appeared to provide administrative control over agent projects.

Reuters said autonomous Cairn AI agents tried more than 1,200 websites and reached sites belonging to more than 100 companies.

The agents targeted organizations mainly in the United States, Japan and Australia, with the apparent aim of gaining persistent access to e-commerce and payment infrastructure. The Hacker News said a typical task told agents to find a way to run code on a shop and plant an uploader web shell.

NorForge published its findings on Oct 19, 2026, after identifying more than 20 exposed Cairn panels likely associated with malicious activity. The panels revealed target identities, weaknesses, credentials, API keys and compromise status, while their apparent administrative controls could start or stop projects, add data, redirect agents and restart old projects.

On this page

Cairn agents searched for code execution and planted web shells

NorForge said Cairn can coordinate agents to investigate targets, search for security weaknesses and attempt break-ins. The observed harnesses had an average success rate of about 10%, with many other tasks reaching partial goals.

For projects that reached their goals, NorForge estimated that the average time from project start to completion was slightly under 23 hours, producing an average of 140 facts per project. The Hacker News said the agents operated with almost no human assistance.

Exposed panels contained secrets and operational controls

NorForge found hundreds of secrets in exposed Cairn data, including credentials and API keys. Trufflehog verified 11% of those secrets as valid.

The panels appeared to expose the harness’s full administrative functionality, including controls to interfere with ongoing operations, insert new data, redirect agents to different targets and restart old projects.

Researchers said exposed control panels could reveal the operation

NorForge said it was notifying victims, particularly those that appeared to have suffered a compromise, while attempting to get the offending panels taken down.

NorForge said it was cooperating with Reuters to notify victims, particularly organizations that appeared to have suffered a compromise. It was also attempting to have the Cairn panels taken down.

Deere said it fixed the problem and found no sign that sensitive information had been accessed; SharkNinja said it contained the threat on a standalone product-support site, while Cummins said it was investigating a possible attack on a vendor-operated website.

FAQ

What happened in the Cairn AI agent campaign?

Reuters said autonomous Cairn agents tried more than 1,200 websites and reached sites belonging to more than 100 companies. The Hacker News said the agents compromised websites with almost no human assistance.

Who was targeted by the Cairn agents?

The AIA0001 cluster targeted organizations mainly in the United States, Japan and Australia, seeking persistent access to e-commerce and payment infrastructure.

What did the Cairn agents try to do?

The Hacker News said a typical task instructed agents to find a way to run code on a shop and plant an uploader web shell. NorForge said Cairn can investigate targets, find security weaknesses and attempt break-ins.

Was the Cairn campaign successful?

Reuters said the agents reached websites belonging to more than 100 companies. NorForge estimated the observed harnesses had an average success rate of about 10%, with many remaining tasks achieving partial goals.

What information was exposed by the Cairn panels?

The panels revealed target identities, discovered weaknesses, credentials, API keys and compromise status. NorForge also found hundreds of secrets, with 11% verified as valid by Trufflehog.

Sources

  1. Inside Cairn: Open Windows into massive AI-Driven Cyber Operations - NorForge, NorForgePrimary
  2. Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack Spree, Dark Reading
  3. Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites, The Hacker News
  4. Penetration test, Wikipedia
How we checked this story
ClaimSourceStatus
Dark Reading said a Chinese-speaking attacker compromised hundreds of websites worldwide, including John Deere, SharkNinja, and Cummins.Dark ReadingAttributed
Reuters said the attacker’s autonomous AI agents tried more than 1,200 sites and reached websites belonging to more than 100 companies.Reuters, via The Hacker NewsAttributed
The Hacker News said the agents compromised websites with almost no human assistance, and researchers observed the operation through exposed control panels.The Hacker NewsAttributed
NorForge found more than 20 exposed Cairn panels likely associated with malicious activity.NorForgeConfirmed
Cairn can coordinate AI agents to investigate targets, find security weaknesses, and attempt break-ins.NorForgeConfirmed
The AIA0001 cluster targeted organizations mainly in the United States, Japan, and Australia to gain persistent access to e-commerce and payment infrastructure.NorForgeConfirmed
The Hacker News said the operators typically instructed agents to find code execution and plant an uploader web shell.The Hacker NewsAttributed
NorForge estimated the average time from project start to goal completion at slightly under 23 hours for projects that reached their goals.NorForgeConfirmed
NorForge estimated that the observed harnesses had an average success rate of about 10%.NorForgeConfirmed
NorForge found hundreds of secrets in exposed Cairn data, and Trufflehog verified 11% as valid.NorForgeConfirmed
Exposed Cairn panels revealed target identities, discovered weaknesses, credentials, API keys, and compromise status.NorForgeConfirmed
The exposed panels appeared to provide administrative controls for starting projects, stopping projects, adding data, redirecting agents, and restarting projects.NorForgeConfirmed
Deere said it fixed the problem and found no sign that sensitive information had been accessed.Deere, via The Hacker NewsAttributed
SharkNinja said the attack affected a standalone product-support site and that it contained the threat.SharkNinja, via The Hacker NewsAttributed
Cummins said it was investigating a possible attack on a website operated by one of its vendors.Cummins, via The Hacker NewsAttributed
NorForge said it was cooperating with Reuters to notify victims and seeking to have the Cairn panels taken down.NorForgeConfirmed
norforge.com published its report on Oct 19, 2026.norforge.comConfirmed

Could not verify

  • Whether the campaign stole data from the more than 1,200 tested sites is not established.
  • Whether the exposed panel controls could be used without authentication is not established.
  • How many companies were fully compromised is not established.
  • Whether the Cairn activity was linked to the separate Gambit campaign is not established.
agents
See all in Agent Security →
Explore with AI
ChatGPT
Claude
Perplexity
Grok