Log inSign up
Home › Agents
@reactjay3
Japheth AdamuDeveloper▲6
AI Engineer, RAILTECH DAO LABS
Oct 21 · Link · Agents · Abuja

AI agents ran most of a hacker's campaign against 100-plus company websites

We’re slowly moving from AI helping hackers to AI doing the hacking itself 😭 The scary part is how much can be done at scale with minimal human involvement. Cybersecurity is about to get a lot more interesting 👀

NorForge logoAI agents ran most of a hacker's campaign against 100-plus company websitesNorForge threat researcher Snorre Fagerland published the findings on Oct. 19. The report traces a Chinese-language operator who used Cairn, an open-source AI penetration testing platform. Cairn's agents do the probing once an operator supplies a target and goal, and the researchers found its control panels publicly reachable. NorForge estimates an average task costs around $5 when failed attempts are included, while noting the figure could be off by a wide margin. The report also found that some apparently legitimate red team operations were exposed through the same panels. Reuters identified some victims by reviewing the hacker's activity. Earlier in September, Gambit Security had reported a criminal campaign using similar AI harnesses. For teams building agent products, an autonomous testing tool left on a public address can become attacker infrastructure. Control panels, credentials and broad tool permissions are the parts to audit before an agent system is exposed to the internet.AI Lounge News · via NorForge · Read the story →
MembersNews
1New comment Oct 21

Comments1

  • @ryanallis
    Ryan Allis
    Founder of AI Lounge and SaasRise, helping founders reach $100M+ exits
    Oct 21

    When one attacker with AI agents can go after 100-plus company websites with barely any human work, the businesses that get hurt most are small ones with no security person on staff. That is where I'd bet the money is: simple, cheap protection a 20-person company can switch on in an afternoon, not another tool built for big enterprise security teams.

Log in to join the thread.