Security1 hOctober 19, 2026, 20:02

NorForge finds 20+ exposed Cairn panels in AI-driven intrusions

NorForge published Inside Cairn, an investigation linking more than 20 publicly exposed control panels for the Cairn AI harness to financially motivated intrusions. The largest cluster, AIA0001, spans 14 Chinese-language panels on AS56594 with over 1,100 attack projects targeting e-commerce and payment infrastructure in the US, Japan and Australia.

Unite.AI

Open source

NorForge finds 20+ exposed Cairn panels in AI-driven intrusions

AIA0001 cluster: 14 panels and over 1,100 attack projects
Targets are e-commerce and payment systems in US, Japan, Australia
Tasks ran under a worker named claudecode_deepseek-v4.1-flash
Average task cost estimated at around $5

#Cairn#NorForge#DeepSeek#Tencent

Cisco Talos Launches CAIRN Framework to Classify AI-Driven Malware

Security

CrowdStrike: AI-Assisted Attacks on Nine South Korean Banks Exposed via Claude Code Logs

Business

NorForge finds 20+ exposed Cairn panels in AI-driven intrusions

Cisco Talos Launches CAIRN Framework to Classify AI-Driven Malware

CrowdStrike: AI-Assisted Attacks on Nine South Korean Banks Exposed via Claude Code Logs

DeepSeek Backs Ex-Tencent AI Scientist's $400 Million Robot Lab

Benchmark of 123 Indian students exposes bias in frontier AI models