GoKawiilSecurity firm Norforge finds AI-agent hacker breached John Deere, SharkNinja, Cummins sites
AI security firm Norforge discovered that a hacker used a swarm of largely autonomous AI agents to breach over 100 company websites, including those linked to John Deere, SharkNinja, and Cummins, according to Reuters. The attacker exploited an open-source AI platform called Cairn, giving instructions in under 100 Chinese characters, with breaches taking roughly 23 hours to complete; Norforge also identified over 20 other exposed Cairn instances it deems likely malicious.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident suggests that AI agents can now autonomously orchestrate real-world cyberattacks at scale, potentially lowering the skill and effort needed to breach corporate systems. It also highlights that legitimate open-source AI tools built for problem-solving can be repurposed for malicious ends, which may push companies to scrutinize how such platforms are secured and monitored. John Deere says no sensitive data was accessed, while Cummins says it is still investigating, indicating the full impact remains unclear.
- Norforge found a hacker used autonomous AI agents to breach over 100 websites, including John Deere, SharkNinja, and Cummins.
- The attacks were orchestrated through Cairn, an open-source AI 'problem-solving engine,' with instructions given in under 100 Chinese characters.
- Successful breaches took about 23 hours, and Norforge identified more than 20 other exposed Cairn instances it considers likely malicious.
Source: theverge.com — Emma Roth, 2026-10-19
Published there as: “A hacker broke into John Deere and SharkNinja with an army of AI agents”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.