The AI agents carried out the attacks with little involvement from the human hacker.
The AI agents carried out the attacks with little involvement from the human hacker.
A hacker broke into more than 100 websites using an army of AI agents that mostly operated on their own, according tofindings from the AI security firm Norforge. Though Norforge doesn’t name the targets,Reutersreportsthat the victims included companies like John Deere, SharkNinja, and Cummins.
Concerns over AI-powered cybersecurity breacheshave grown as the technology grows more advanced, with hackers using the tools to carry out large-scale attacks. At the same time,rogue AI agents are carrying out attacksof their own after escaping from testing environments.
Researchers at Norforge uncovered the attacks through exposed work on Cairn, an open-source AI platform thatdescribes itselfas a “general-purpose problem-solving engine.” With Cairn, users set a start and end point for the AI agents, which document their progress as they move forward with the task. However, as noted by Norforge, hackers can also use the tool to orchestrate cyberattacks using AI agents.
The hacker who broke into more than 100 sites was the “most active” among the exposed Cairn instances discovered by Norforge, waging attacks on companies based in the US, Canada, Australia, and Japan, as reported byReuters. This attacker laid out “preferred intrusion tactics” using fewer than 100 Chinese characters, with successful breaches taking about 23 hours, according toReuters. Overall, Norforge found more than 20 exposed Cairn instances th…
In a statement toThe Verge, Cummins spokesperson Melinda Koski said the company “is investigating the report of a potential cyber-attack on a website operated by one of our third-party vendors.” A John Deere spokesperson toldReutersthat there’s “no indication that sensitive information was accessed” as a result of the attack, while SharkNinja said the breach impacted a standalone site with product support information, and that it has contained t…
John Deere and SharkNinja didn’t immediately respond toThe Verge’s request for comment.
Norforge says it’s working to get the malicious Cairn instances taken down. Cairn’s creator, who goes by @le1xia0,said earlier this monththat the platform “was never a ‘hacking tool,’” adding that “misuse is a human decision, not a feature of the engine.”