Theneurondaily AI Hackers Exploit Exposed Dashboards Using Cairn Tool
Article Content
- •Over 20 exposed control panels for the Cairn AI hacking tool were found.
- •More than 1,100 attack projects targeted online stores in the US, Japan, and Australia.
- •Successful attacks averaged under 23 hours to complete, with a 10% success rate.
NorForge, a security startup, discovered over 20 exposed control panels for an AI hacking tool named Cairn, used by criminals to target online businesses. These dashboards revealed more than 1,100 attack projects primarily aimed at online stores in the US, Japan, and Australia. The Cairn tool operates by allowing AI agents to collaborate on hacking projects, sharing insights and strategies in a shared workspace. The majority of the exposed panels were driven by Chinese-language instructions, indicating a potential regional focus. NorForge estimates that about 10% of these projects successfully achieved their goals, with an average completion time of just under 23 hours. The incident highlights the evolving capabilities of AI in cybercrime, raising concerns about the security of online retail platforms.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Cummins in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What is the Cairn tool?
Who is affected by these attacks?
What is the success rate of these attacks?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…