Hacker Used AI Army to Break Into John Deere and SharkNinja

A hacker recently broke into more than 100 websites, including those of John Deere and SharkNinja, using an army of AI agents that operated mostly on their own. The attacks were discovered by security firm Norforge, which found that the hacker used an open-source AI platform called Cairn to orchestrate the breaches. With just a few Chinese characters, the hacker set the AI agents loose, and successful intrusions took about 23 hours each.

The AI agents carried out the attacks with little human involvement, marking a new era in cybersecurity where AI can be used to automate and scale cyberattacks. Norforge found over 20 exposed Cairn instances that are likely malicious, and the most active attacker targeted companies in the US, Canada, Australia, and Japan. While the targeted companies say no sensitive information was accessed, the incident highlights the growing risk of AI-powered cyber threats.

For everyday people, this means that the companies you trust with your data are increasingly vulnerable to sophisticated attacks. AI can make hackers more efficient, potentially leading to more frequent and widespread breaches. This could put your personal information, like passwords and payment details, at greater risk. As AI tools become more accessible, both good and bad actors will use them, so it's crucial for companies to strengthen their defenses and for individuals to stay vigilant about their online security.

The creator of Cairn insists the platform was never intended as a hacking tool, but the incident shows how easily AI can be misused. Norforge is working to take down the malicious instances, but the cat-and-mouse game between hackers and security experts is likely to intensify. In the meantime, consumers should be aware that even well-known brands can be compromised, and they should monitor their accounts for suspicious activity.