A hacker broke into John Deere and SharkNinja with an army of AI agents
· Safety
According to Norforge findings, a hacker reportedly used AI agents to breach over 100 websites; Reuters reports victims included John Deere, SharkNinja, and Cummins.
Hacker reportedly deployed AI agents to breach 100+ websites with minimal human involvement, according to Norforge findings.
A hacker reportedly broke into more than 100 websites using an army of AI agents that mostly operated on their own, according to findings from AI security firm Norforge. Though Norforge doesn't name the targets, Reuters reports that victims included John Deere, SharkNinja, and Cummins.
The attacks were discovered through exposed work on Cairn, an open-source AI platform described as a general-purpose problem-solving engine. Hackers can use Cairn to orchestrate cyberattacks by setting start and end points for AI agents, which document their progress. The attacker used fewer than 100 Chinese characters to describe preferred intrusion tactics, with successful breaches reportedly taking about 23 hours.
Norforge found more than 20 exposed Cairn instances that are likely malicious. The hacker who broke into more than 100 sites was reportedly the most active among exposed instances, waging attacks on companies based in the US, Canada, Australia, and Japan.
John Deere stated there's no indication sensitive information was accessed. SharkNinja said the breach impacted a standalone product support site and has been contained. Cummins said it is investigating the report of a potential cyber-attack on a website operated by one of its third-party vendors.
Cairn's creator stated the platform was never designed as a hacking tool, adding that misuse is a human decision, not a feature of the engine. Norforge says it's working to get the malicious Cairn instances taken down.
According to Norforge, AI agents reportedly enabled a hacker to breach 100+ websites at scale, prompting security firms and companies to contain the exposed malicious instances.
Source: The Verge
More AI news
- ServiceNow and Nvidia launch Arc, a new AI agent for enterprise
- OpenAI Invests in Startup That Uses Brain Implants to Detect Cancer
- “We were looking at it wrong”: The explosive claim that’s upended the AI world
- Disney Asked Character.AI to Go Bankrupt for a Get-Out-of-Lawsuits Card
- AI researchers stranded Claude on a virtual desert island. It started to “play.”
- OnlyFans Creators Are Pissed That Meta Lets Muse Talk Dirty
`;
}
function imgFallback(el) {
if (!el.dataset.fb) { el.dataset.fb = '1'; el.removeAttribute('srcset'); el.src = el.dataset.full; }
else { el.style.visibility = 'hidden'; }
}
function formatDate(iso) {
if (!iso) return '';
return new Date(iso).toLocaleDateString('en-US', { month: 'long', day: 'numeric', year: 'numeric' });
}
function handleSubscribe(e) {
e.preventDefault();
const email = document.getElementById('inline-email').value;
e.target.reset();
goSubscribe(email, 'article');
}
// One step: the email typed on the page goes straight to Beehiiv's confirm page (no second form).
function goSubscribe(email, source) {
window.__subSource = source;
const url = 'https://magic.beehiiv.com/v1/eb0b9508-1ffd-4fb1-a63c-e762fa86569c?email=' + encodeURIComponent(email)
+ '&utm_source=aifeed.run&utm_medium=website&utm_campaign=' + encodeURIComponent(source || 'site');
// Same tab (no popup: in-app browsers like Instagram's prompt on new windows); Beehiiv sends the visitor to our thanks page after the one tap.
window.location.href = url + '&redirect_to=' + encodeURIComponent('https://aifeed.run/subscribe/thanks/'); return;
try { w.opener = null; } catch (err) {}
document.getElementById('sub-email-field').value = email;
document.getElementById('sub-form-state').style.display = 'none';
document.getElementById('sub-success-state').style.display = 'block';
document.getElementById('sub-overlay').style.display = 'flex';
document.body.style.overflow = 'hidden';
}
function openSubOverlay(email) {
document.getElementById('sub-email-field').value = email;
document.getElementById('sub-form-state').style.display = 'block';
document.getElementById('sub-success-state').style.display = 'none';
document.getElementById('sub-btn').textContent = 'Subscribe — It\'s Free →';
document.getElementById('sub-btn').disabled = false;
document.getElementById('sub-overlay').style.display = 'flex';
document.body.style.overflow = 'hidden';
}
const BEEHIIV_SUBSCRIBE_URL = 'https://magic.beehiiv.com/v1/eb0b9508-1ffd-4fb1-a63c-e762fa86569c'; // Beehiiv public Magic Link for AIFeed.run (pub_eb0b9508-…), no API key
async function submitSubscribe(e) {
e.preventDefault();
const email = document.getElementById('sub-email-field').value;
const btn = document.getElementById('sub-btn');
btn.textContent = 'Opening signup...';
btn.disabled = true;
// Opens Beehiiv's one-click confirm page for this email ("You'll be subscribed with …"). No secret client-side.
const bhUrl = BEEHIIV_SUBSCRIBE_URL + '?email=' + encodeURIComponent(email)
+ '&utm_source=aifeed.run&utm_medium=website&utm_campaign=' + encodeURIComponent(window.__subSource || 'site');
// Same tab (no popup: in-app browsers like Instagram's prompt on new windows); Beehiiv sends the visitor to our thanks page after the one tap.
window.location.href = bhUrl + '&redirect_to=' + encodeURIComponent('https://aifeed.run/subscribe/thanks/'); return;
try { w.opener = null; } catch (err) {}
document.getElementById('sub-form-state').style.display = 'none';
document.getElementById('sub-success-state').style.display = 'block';
}
function closeSubOverlay(e) {
if (e && e.target && e.target.id !== 'sub-overlay' && e.target.id !== 'sub-close-btn') return;
document.getElementById('sub-overlay').style.display = 'none';
document.body.style.overflow = '';
}
function copyLink() {
navigator.clipboard.writeText(window.location.href).then(() => {
const t = document.getElementById('toast');
t.textContent = '🔗 Link copied!';
t.classList.add('show');
setTimeout(() => t.classList.remove('show'), 2500);
});
}
function showToast() {
const t = document.getElementById('toast');
t.textContent = '🎉 You\'re subscribed! Welcome to the feed.';
t.classList.add('show');
setTimeout(() => t.classList.remove('show'), 3500);
}
function getDemoPosts() {
return [
{
id: 'demo-1', slug: 'apple-building-ai-glasses-beat-meta',
headline: 'Apple Is Building AI Glasses To Beat Meta',
summary: 'No screen. Just AI, cameras, and Siri. 4 designs. Premium acetate. Ships 2027.',
body: '