Threat actors abuse open-source Cairn AI agent platform to autonomously breach over 100 organizations

AI security firm Norforge reported that multiple threat actors abused Cairn, an open-source engine that coordinates AI agents and can act as an autonomous penetration testing tool, after some operators left their control panels exposed. One Chinese-language cluster ran over 1,100 attack projects against e-commerce and payment infrastructure in the US, Japan, and Australia, seeking persistent webshell access, and Reuters reported more than 100 breached companies including John Deere and SharkNinja. Other clusters targeted payment card and cryptocurrency theft. Norforge found roughly a 10 percent success rate and hundreds of harvested secrets. Named indicators of compromise are in Norforge's primary report rather than the summary coverage.

Check

Watch for autonomous-agent attack patterns against public web and payment apps, hunt for unexpected webshells and admin-panel access, and pull indicators from Norforge's report.

Affected

Internet-facing e-commerce, payment, and admin applications are being targeted at scale by AI agent platforms that deploy webshells and harvest secrets for persistent access.

Fix

Harden and monitor public web applications, enforce least privilege on admin panels, rotate exposed secrets, and apply the detection indicators in Norforge's primary report.