AI agents attacked over 1,200 websites, including John Deere and SharkNinja

Researcher Snorre Fagerland of NorForge found about two dozen exposed Cairn control panels being used for malicious attacks. Group AIA0001 ran 14 panels and over 1,100 attack projects against shops and payment systems in the US, Japan, Australia and Canada, at roughly $5 per attempt and a ~10% success rate.

• Agents tried to break into over 1,200 websites, hitting more than 100 companies
• Average cost per attack task was about $5; average time to a successful break-in was 23 hours
• NorForge found hundreds of secrets in leaked data, 11% still valid
• Attacks relied on SQL injection, unsafe file uploads and outdated code