A Chinese-speaking hacker breached websites belonging to more than 100 companies by employing artificial intelligence agents to conduct the hacking spree. The cyberattack began on 25 September, targeting e-commerce websites across Japan, Australia, Canada, and the United States.
By late last week, the hacker's agents had attempted to infiltrate more than 1,200 different sites. Snorre Fagerland identified approximately two dozen instances of Cairn being used for malicious purposes starting around 2 October.
Fagerland remarked, "The development in this field is astounding." Deere, SharkNinja, and Cummins were among the corporations breached during the campaign.
Deere stated it took necessary remediation actions and found no evidence that sensitive information was accessed. SharkNinja reported that the breach affected a standalone site containing only product support information and confirmed the threat was contained.
Cummins is currently investigating a report regarding a potential cyber-attack on a website managed by one of its third-party vendors. The cost for each successful hack was approximately $50.
Gambit Security reported that Russian-speaking extortionists used SpaceX's Cursor AI tool to breach seven organisations in August. A separate AI agent-driven spree in September led to breaches at 25 companies and the theft of at least 600,000 credit card records, according to Gambit Security.
