Chinese-speaking hackers leverage Cairn AI framework for autonomous intrusions in semiconductor and defense sectors
In August and September 2026, Chinese-speaking attackers used the open-source Cairn AI penetration-testing framework combined with Chinese-language AI models such as Zhipu GLM 5.2 and DeepSeek V4 Flash/Pro to conduct at least 25 autonomous operations targeting semiconductor manufacturers, defense-policy organizations, and civil-society institutions. The campaign showed how agentic AI can translate brief operator instructions into sustained intrusion attempts lasting from 20 minutes to over 50 hours, with confirmed unauthorized access and data exfiltration at ten organizations. Attackers leveraged autonomous reasoning cycles via Cairn's blackboard system, injected operational hints, and used a forged authorization pretext to bypass defenses. Infrastructure included a Hong Kong controller and a U.S.-based staging server. Operations involved reconnaissance, exploitation, credential theft, privilege escalation, and persistence, exposing sensitive employee, student, and government data. Palo Alto Networks recommends using its Advanced URL Filtering, Advanced IP Defense, and Cortex XDR solutions to mitigate such threats.
Linha do tempo
-
Chinese-speaking hackers leverage Cairn AI framework for autonomous intrusions in semiconductor and defense sectors
ler a análise desta fonte ocultar
In August and September 2026, Chinese-speaking attackers used the open-source Cairn AI penetration-testing framework combined with Chinese-language AI models such as Zhipu GLM 5.2 and DeepSeek V4 Flash/Pro to conduct at least 25 autonomous operations targeting semiconductor manufacturers, defense-policy organizations, and civil-society institutions. The campaign showed how agentic AI can translate brief operator instructions into sustained intrusion attempts lasting from 20 minutes to over 50 hours, with confirmed unauthorized access and data exfiltration at ten organizations. Attackers leveraged autonomous reasoning cycles via Cairn's blackboard system, injected operational hints, and used a forged authorization pretext to bypass defenses. Infrastructure included a Hong Kong controller and a U.S.-based staging server. Operations involved reconnaissance, exploitation, credential theft, privilege escalation, and persistence, exposing sensitive employee, student, and government data. Palo Alto Networks recommends using its Advanced URL Filtering, Advanced IP Defense, and Cortex XDR solutions to mitigate such threats.