Story
A hacker broke into John Deere and SharkNinja with an army of AI agents
2 reports
2 websites
2 discussions
Latest report
Overview
Norforge, an AI security firm, found exposed work from Cairn, an open-source AI platform, indicating that a hacker used largely autonomous AI agents to breach more than 100 websites. Reuters reported that the affected organizations included John Deere, SharkNinja, and Cummins. Norforge identified the attacker as the most active operator among exposed Cairn instances and said the campaign targeted companies in the United States, Canada, Australia, and Japan. Cairn describes itself as a general-purpose problem-solving engine that lets users define starting and ending points for AI agents, which record their progress while completing tasks. Norforge said the same system can be used to orchestrate cyberattacks. Reuters reported that the attacker specified preferred intrusion tactics in fewer than 100 Chinese characters and that successful breaches took about 23 hours. Norforge found more than 20 exposed Cairn instances it considers likely malicious and said it is working to have them taken down. John Deere told Reuters it had no indication that sensitive information was accessed. SharkNinja said a standalone product-support site was affected and that it contained the threat. Cummins said it was investigating a reported potential attack on a website run by a third-party vendor. Cairn creator @le1xia0 said the platform was never intended as a hacking tool and that misuse is a human decision.
Summary from theverge.com.
Reports
Coverage in publication order. Each report keeps its own summary and analysis.
theverge.com
A hacker broke into John Deere and SharkNinja with an army of AI agents
Read report →kylesinvestigation.com
One Hacker Used AI Agents to Breach 100+ Company Websites for About $5,000
NorForge, a threat-intelligence firm, said a Chinese-speaking operator used autonomous AI agents through the open-source Cairn platform to target more than 1,200 websites beginning September 25, 2026. The agents reportedly compromised sites associated with more than 100 companies, primarily in the United States, Canada, Australia and Japan. Reuters reviewed attacker records and identified Deere, SharkNinja and Cummins among the affected companies; the amount of data taken, if any, remains unknown. Cairn assigns goals to AI agents, which then pursue multistep tasks and post results to a shared board. In the reported campaign, short Chinese-language instructions directed agents to seek code-execution flaws and install web-shell uploaders. NorForge confirmed a live web shell at a hardware-parts vendor and confirmed a compromise at a large US retailer. One intrusion combined unauthorized write access to a memcached session store, unsafe deserialization of saved PHP objects and an older Zend Framework vulnerability. NorForge researcher Snorre Fagerland told Reuters the operation spent about $5,000 in tokens, or roughly $50 per successful intrusion, while NorForge estimated about $5 per task across successful, failed and abandoned attempts and an overall success rate near 10%. Exposed Cairn control panels revealed targets, vulnerabilities and credentials; TruffleHog identified hundreds of secrets, 11% of which remained valid. Deere and SharkNinja said they contained or remediated limited incidents, while Cummins said it was investigating a possible attack involving a vendor-operated website.
Read report →
Community reactions
Each reaction summarizes sampled comments from the linked discussion.
Hacker News · theverge.com
Reddit r/artificial · kylesinvestigation.com
Reported comments: 3 · 4 saved in sample
Analysis ready
Read this discussion’s reaction
Based on 4 sampled comments from this thread. Analyzed 2026-10-19.
The thread barely engaged with the article’s AI-agent angle. Rather than debating whether autonomous agents materially changed the scale, speed, or sophistication of the intrusion, commenters focused on identifying the underlying reporting and inferring the likely target. One reader read the cited incident report as an ordinary campaign against Magento-based e-commerce sites, aimed at stealing money rather than pursuing more exotic manufacturer-specific assets. That framing quietly deflates the headline’s dramatic image of an AI-agent army: the available discussion treats the operation as financially motivated cybercrime, not evidence of some novel AI-enabled strategic breach. There was also a hostile aside about one named victim, but it offered no argument about AI systems, agent capabilities, security implications, or the ethics of automated intrusion. Others simply supplied archived and original-source links. As a result, the conversation provides almost no basis for judging whether AI agents were genuinely central to the attack, whether they made the operation more effective, or whether this represents a broader security shift. The closest thing to consensus is that the reported target appears to have been e-commerce infrastructure and theft, while the article’s AI framing went largely unexamined.