Security researcher Snorre Fagerland discovered autonomous AI agents, operated by a Chinese-speaking criminal, targeting over 1,200 company websites to breach them with minimal human input, including sites of major companies like Deere, SharkNinja, and Cummins. These AI-driven attacks used the open-source Cairn tool to gain persistent access by planting web shells, with an average success rate of about 10% and low operational costs, while exposed control panels also leaked sensitive data and credentials. NorForge is notifying victims and urging hosting providers to secure or remove these exposed AI agent control panels to prevent further compromises.
https://thehackernews.com/2026/10/hackers-use-autonomous-ai-agents-to.html