/
malware_families:Cairn × limpar

Resultados

6 casos · pág. 1/1

darkreading.com · critical

Chinese-speaking actor abuses AI pen-test tool Cairn to compromise hundreds of websites, including John Deere, SharkNinja and Cummins

A Chinese-speaking attacker has reportedly compromised hundreds of websites worldwide by abusing Cairn, an AI-driven penetration-testing tool, to automate the attacks. Reported victims include large industrial and consumer brands such as John Deere, SharkNinja and engine manufacturer Cummins, from which the attacker is said to have looted…

securityweek.com · high

Threat actors abuse open source AI platform Cairn to automate attacks on e-commerce sites, reportedly breaching over 100 organizations

Threat actors are abusing the open source AI platform Cairn, an agent-coordination engine usable as an autonomous penetration testing tool, to automate attacks on hundreds of websites worldwide. AI security firm Norforge found the activity after threat actors left their Cairn panels exposed, following a Gambit Security report on attackers…

thehackernews.com · high

Chinese-speaking actor uses autonomous Cairn AI agents to attack 1,200+ websites and breach 100+ companies, incl. Deere and SharkNinja

A Chinese-speaking operator used the open-source AI agent framework Cairn to run autonomous attacks against more than 1,200 sites, reaching websites of over 100 companies, including Deere, SharkNinja and Cummins. Researcher Snorre Fagerland of NorForge found the operation around 2 October 2026 by scanning for about two dozen exposed Cairn…

olhardigital.com.br · high

Chinese-speaking actor uses Cairn AI agents with DeepSeek and Claude Code to breach 100+ company websites for about $50 each

A Chinese-speaking threat actor used AI agents coordinated through the open-source Cairn platform to attempt intrusions against more than 1,200 websites, reportedly compromising sites of over 100 companies, including Deere, SharkNinja and Cummins. Researcher Snorre Fagerland of NorForge found the activity while monitoring internet-exposed…

sentinelone.com · high

Weekly CTI roundup: Ryuk access broker sentenced, TraderTraitor FLATROOF/ROOFDECK macOS backdoors, AI-agent skimming of 600K cards

This SentinelOne weekly roundup (Week 39, 2026) covers one law enforcement success and two active threat campaigns. A US court sentenced Armenian national Karen Serobovich Vardanyan ("Maneeken"/"Karl Lagerfeld"), an initial access specialist for Ryuk ransomware, to two years in prison and over $1.2 million in restitution. SentinelLABS ide…

gbhackers.com · high

Chinese-speaking operator uses Cairn-based autonomous AI agents to breach 100+ e-commerce websites in AIA0001 campaign

A Chinese-speaking operator used autonomous AI agents on the open-source Cairn platform to compromise the websites of more than 100 companies. NorForge tracks the most active campaign as AIA0001: over 1,100 attack projects across 14 dashboards, and more than 1,200 break-in attempts overall. Targets were e-commerce businesses in the United…