Description: An operator using Chinese-language instructions reportedly directed Cairn, an AI agent framework, to breach more than 100 company websites. The campaign targeted sites in the U.S., Canada, Australia, and Japan. Researchers verified unauthorized access tools on victim servers. Reuters identified websites belonging to farm equipment maker Deere and appliance maker SharkNinja; the extent of data theft remained unclear.
Entities
View all entitiesAlleged: le1xia0 , Large language model developers , DeepSeek and AI agent system developers developed an AI system deployed by hackers , Cybercriminals , AIA0001 and AI agent system deployers, which harmed SharkNinja , Privacy , Information security , Deere , Cummins and Companies.
Alleged implicated AI systems: Large language models , Cairn AI agent framework and AI agent systems
Incident Stats
Incident ID
1766
Report Count
2
Incident Date
2026-09-25
Editors
Daniel Atherton
Incident Reports
Reports Timeline
Loading...
WASHINGTON, Oct 19 (Reuters) - Over the past couple of weeks, a cybersecurity researcher watched as a Chinese-speaking hacker broke into websites belonging to more than 100 companies, including farm equipment maker Deere (DE.N), home applia…
Loading...
More than 20 exposed Cairn panels give an unusually detailed view of how threat actors select targets, direct autonomous agents, exploit vulnerabilities, and establish persistent access to compromised systems.
01 TL;DR
An investigation by N…
Variants
A "variant" is an AI incident similar to a known case—it has the same causes, harms, and AI system. Instead of listing it separately, we group it under the first reported incident. Unlike other incidents, variants do not need to have been reported outside the AIID. Learn more from the research paper.
Seen something similar?