A hacker broke into John Deere and SharkNinja with an army of AI agents

Autonomous AI agents can now conduct complex, large-scale cyberattacks with minimal human oversight.

A hacker used an army of autonomous AI agents, largely operating on their own, to breach over 100 websites. The AI security firm Norforge uncovered these attacks, which reportedly targeted major companies including John Deere, SharkNinja, and Cummins. The hacker leveraged an open-source AI platform called Cairn, designed for general-purpose problem-solving, to orchestrate cyberattacks. Researchers identified more than 20 likely malicious Cairn instances. The attacker detailed preferred intrusion tactics and successfully breached sites in the US, Canada, Australia, and Japan, with breaches taking approximately 23 hours. While John Deere and SharkNinja reported no sensitive data accessed and contained the threat on standalone sites, Cummins is investigating a potential attack on a third-party vendor's website. The creator of Cairn insists the platform was not intended as a hacking tool, attributing the misuse to human decision-making.

The sophistication and autonomy of AI agents in cyberattacks signal a new era of cybersecurity threats, where traditional defenses may be insufficient. As AI tools become more accessible and capable, the barrier to entry for executing large-scale breaches lowers significantly, potentially overwhelming security teams. This incident highlights the dual-use nature of AI technology and the urgent need for robust security protocols to detect and neutralize AI-driven threats.

The ability of AI agents to operate autonomously and adapt their tactics raises concerns about the future of cyber warfare and corporate security. Companies must now consider the possibility of sophisticated, self-directed attacks that can bypass conventional security measures. The race is on to develop AI-powered defense systems that can counter these advanced threats, shifting the cybersecurity landscape towards an AI-versus-AI battleground.