THE HOOK
The scary AI hacking story finally arrived, and it cost about fifty bucks a break-in.
THE GIST
NorForge researcher Snorre Fagerland found exposed panels of Cairn, an open-source agent platform, being used for attacks, per SecurityWeek. One Chinese-speaking actor's agents tried more than 1,200 sites and breached over 100 companies, including Deere and SharkNinja, Reuters reported. Tokens cost roughly $5,000.
THE TAKE
This is the bit the safety crowd warned about, and it turned out boring rather than cinematic. Nobody needed a genius, just a terse prompt, cheap tokens and a very patient machine. Your forgotten support microsite is now a target worth automating. Patch it or kill it.
OPINION
The Next Web reports the tasks ran on a worker named after Claude Code and DeepSeek V4.1 Flash, which says plenty about how commodity this tooling has become. The fix isn't banning agents; it's defenders running the same patient probing against their own sites first.
- Story type: Breaking news
- Impact: High
- Confidence: Medium (multiple reports)
- Audience: Business
- What changed: A security researcher showed AI agents on exposed Cairn panels breaching more than 100 company websites for one attacker.
- What to watch: Whether Cairn's maintainers lock down exposed panels and whether more victims confirm data was taken.
- Reading time: 1 minute
