AI agent attack reached John Deere, SharkNinja and other firms

The campaign appears to have scaled web break-ins across multiple countries while leaving at least some victims with limited confirmed damage.

Norforge says it found a hacker using AI agents to compromise more than 100 websites, with Reuters identifying victims that included John Deere, SharkNinja and Cummins. The activity appears to have been run through exposed instances of Cairn, an open-source agent platform, and Norforge says the most active attacker used fewer than 100 Chinese characters to define preferred intrusion tactics. Reuters reported that successful breaches took about 23 hours and that the attacks targeted organizations in the US, Canada, Australia and Japan. John Deere said there was no sign sensitive data was accessed, SharkNinja said the issue hit a standalone product-support site and has been contained, and Cummins said it is investigating a possible incident tied to a third-party vendor.