Hackers abused open source AI platform Cairn to hit 100+ organizations

Norforge identified three malicious clusters using the open source AI platform Cairn to automate attacks. The largest, Chinese-language cluster spans over 1,100 attack projects across 14 dashboards targeting e-commerce in the US, Japan and Australia; Reuters reports more than 100 breached companies, including John Deere and SharkNinja.

• Largest cluster: 1,100+ projects on 14 dashboards targeting US, Japan, Australia
• Reuters: over 100 companies breached, including John Deere and SharkNinja
• Roughly 10% of attempts succeeded; 11% of exposed secrets were valid
• Second cluster stole cards and crypto; third ran 59 shell-access projects