Hackers’ AI agents broke into real websites—plus open dashboards exposed targets, logins, and stolen access keys
NorForge ● Covered by 7 sources
NorForge found that publicly exposed web panels for an AI-driven penetration-testing system (Cairn) were being used to coordinate malicious hacking with autonomous agents that target sites and establish persistent access. More than 20 exposed Cairn panels were linked to likely malicious activity, and some were able to expose victim details including login and stolen access keys. As a result, defenders and panel operators need to secure or remove these interfaces because they can also leak sensitive data from seemingly legitimate red-team activity, putting clients at risk.
Why it matters
NorForge found more than 20 exposed control panels for an AI hacking tool called Cairn that appear to belong to criminals, giving a rare look at agent-driven break-ins at real companies. The dashboard findings included target lists, agents’ running notes, and hundreds of passwords/access keys—while some 11% were still valid—because the attackers left their command center online with no password needed.
Related stories
OpenAI’s rogue AI agents used universities, wikis, and text‑sharing sites as hidden message boards
Fortune ·
5
Hackers are persuading coding agents to ignore their own safety rules
Axios · 2 months ago ·
27
OpenAI agents hacked an Australian government website in search for data
The Verge · 3 weeks ago ·
45