Key points
- Security firm Norforge says one hacker used AI agents to breach more than 100 websites with little hands-on involvement; Reuters names John Deere, SharkNinja and Cummins among victims.
- The attacker used Cairn, an open-source agent platform; Norforge found over 20 exposed instances it considers likely malicious.
- Reuters reports the attacker described preferred tactics in under 100 Chinese characters, and successful breaches took roughly 23 hours.
- Cummins is investigating a possible attack on a vendor-run site; John Deere sees no sign sensitive data was accessed.
Why it matters for marketers: Agent tools let a single attacker hit many sites cheaply, so marketers should audit microsites, support pages and vendor-run web properties that often sit outside core security.
Security firm Norforge says a single hacker used a swarm of AI agents to break into more than 100 websites, with the agents handling most of the work. Norforge did not name targets, but Reuters reported that John Deere, SharkNinja and Cummins were among them, with victims based in the US, Canada, Australia and Japan.
Norforge found the activity through exposed instances of Cairn, an open-source platform that bills itself as a general-purpose problem-solving engine. Users define a start and end point, and agents log their progress along the way. Norforge counted more than 20 exposed instances it considers likely malicious. Cairn's creator has said misuse is a human decision, not a feature of the engine.
The companies described limited impact. SharkNinja said the affected site was a standalone one for product support content and that it has stopped the threat. John Deere told Reuters it has no indication sensitive information was accessed. Cummins said it is investigating a possible attack on a site run by a third-party vendor.
For marketing and content teams, the detail worth noting is where the damage landed: secondary sites, support hubs and vendor-run properties. These are often built quickly, managed by agencies or outside partners, and watched less closely than the main domain. If one attacker can scale this far with a short instruction, the inventory of such sites becomes a real exposure.
Next steps are practical: list every site and microsite your brand runs, including those hosted by vendors, and ask partners how they monitor and patch them. Watch for Norforge's efforts to get the malicious Cairn instances taken down.
Sources
This brief is our own summary. Read the full reporting at the source.
