A Chinese-speaking criminal used autonomous AI agents to breach over 1,200 company websites, targeting more than 100 organizations including Deere, SharkNinja, and Cummins.
The vulnerability or weakness
The vulnerability arose from exposed control panels of the Cairn AI tool, which was left open on the internet, allowing the attacker to use it for unauthorized penetration testing.
Earlier attacks and coverage
Business impact
The breach could lead to unauthorized access and potential data theft, impacting operations and reputation, though the specific damage reported by the affected companies was limited.
Industries affected
The incident affected multiple industries, including agriculture, appliances, and manufacturing.
Users affected
Customers of the affected companies may be at risk of data exposure, though the companies reported limited damage to their operations and no signs of sensitive information being accessed.
