黑客用 AI 智能体集群入侵 John Deere、SharkNinja 等 100 多个网站
A hacker broke into John Deere and SharkNinja with an army of AI agents
安全公司 Norforge 发现，一名黑客借助开源 AI 平台 Cairn 编排 AI 智能体，入侵了 100 多个网站，路透社称受害者包括 John Deere、SharkNinja 和 Cummins。该攻击者用不到 100 个汉字写出偏好的入侵策略，成功入侵耗时约 23 小时，攻击目标位于美国、加拿大、澳大利亚和日本。Norforge 共发现 20 多个疑似恶意的公开 Cairn 实例，正推动将其下线；Cairn 创建者 @le1xia0 称该平台从来不是黑客工具，滥用是人的决定。
正文
当前显示原文，中文全文译文尚未就绪。
A hacker broke into more than 100 websites using an army of AI agents that mostly operated on their own, according to findings from the AI security firm Norforge . Though Norforge doesn’t name the targets, Reuters reports that the victims included companies like John Deere, SharkNinja, and Cummins.
Concerns over AI-powered cybersecurity breaches have grown as the technology grows more advanced, with hackers using the tools to carry out large-scale attacks. At the same time, rogue AI agents are carrying out attacks of their own after escaping from testing environments.
Researchers at Norforge uncovered the attacks through exposed work on Cairn, an open-source AI platform that describes itself as a “general-purpose problem-solving engine.” With Cairn, users set a start and end point for the AI agents, which document their progress as they move forward with the task. However, as noted by Norforge, hackers can also use the tool to orchestrate cyberattacks using AI agents.
The hacker who broke into more than 100 sites was the “most active” among the exposed Cairn instances discovered by Norforge, waging attacks on companies based in the US, Canada, Australia, and Japan, as reported by Reuters . This attacker laid out “preferred intrusion tactics” using fewer than 100 Chinese characters, with successful breaches taking about 23 hours, according to Reuters . Overall, Norforge found more than 20 exposed Cairn instances that are “likely malicious.”
In a statement to The Verge , Cummins spokesperson Melinda Koski said the company “is investigating the report of a potential cyber-attack on a website operated by one of our third-party vendors.” A John Deere spokesperson told Reuters that there’s “no indication that sensitive information was accessed” as a result of the attack, while SharkNinja said the breach impacted a standalone site with product support information, and that it has contained the threat.
John Deere and SharkNinja didn’t immediately respond to The Verge ’s request for comment.
Norforge says it’s working to get the malicious Cairn instances taken down. Cairn’s creator, who goes by @le1xia0, said earlier this month that the platform “was never a ‘hacking tool,’” adding that “misuse is a human decision, not a feature of the engine.”
Update, October 19th: Added a statement from Cummins.