AI agents feature in breach report

A hacker used AI agents to break into more than 100 websites, according to findings from security firm Norforge reported by The Verge. Reuters reported that victims included John Deere, SharkNinja and Cummins. The agents reportedly did much of the work with little involvement from the human hacker, using an open-source platform called Cairn to carry out tasks. Norforge found more than 20 exposed Cairn instances it considered likely malicious. The Verge’s report includes details from the companies: John Deere said it had no indication sensitive information was accessed, SharkNinja said the breach affected a standalone product-support site and that it had contained the threat, and Cummins said it was investigating a potential attack on a vendor-operated website.

For a business owner, the point isn’t that every AI agent is a threat. It’s that agents can be directed to take actions, and those actions may have consequences beyond the tool they’re running in. Review what your agents can access and change, keep their permissions limited to what they need, and monitor what they do. This is the kind of risk we build into an AI command centre, so teams can keep track of where agents are operating and what they’re allowed to do.