A hacker broke into 100+ company websites with AI agents for about $50 per breach, Reuters reports. Deere, SharkNinja, Cummins.
Reports say the researcher saw a mix of DeepSeek and Claude Code. I bet the headlines tomorrow will say "Chinese AI hacks America" and Claude Code will be a footnote.
The agents ran on Cairn, an open source agent framework. Many operators left its control panels open on the internet, thats how NorForge found them.
AI agents can hack now, open and closed. No model ban changes that. Patch your sites, because an attack now costs $50.
HOLY WTF. Reuters is reporting that a Chinese-speaking hacker used AI agents to compromise websites belonging to more than 100 companies, including Deere, SharkNinja and Cummins, after attempting intrusions against over 1,200 sites.
The estimated cost: roughly $5,000 in AI tokens, or $50 per successful breach. Successful intrusions took around 23 hours on average.
The attackers used the open-source Cairn agent framework, apparently combining DeepSeek models with a Claude Code harness. One campaign gave its agents instructions in fewer than 100 Chinese characters.
NorForge researcher Snorre Fagerland: 'It's a new world now.'