Norforge
An AI security company focused on AI-driven investigation of cyberattacks and security research, and which discloses security incidents related to AI agents.
Timeline (last 90 days)
Security firm Norforge disclosed on October 19 an investigation into exposed Cairn control panels, with more than 20 exposed Cairn panels possibly linked to malicious activity, and these systems were described as an "AI-driven hacking engine" that can coordinate agents toward set objectives.
The most active cluster, AIA0001, operates 14 panels hosting more than 1,100 attack projects; a successful intrusion took slightly under 23 hours, each project recorded an average of about 140 facts, the average success rate was close to 10%, and the cost per task was about $5.
The incident was disclosed by the AI security company Norforge, and Reuters reported the specific list of affected enterprises.
Norforge's investigation indicates that these AI agents "operated largely autonomously", meaning the attack process was highly automated with minimal human intervention.
The "largely autonomous operation" described by Norforge is end-to-end autonomy without human intervention, which is also the key reason this incident is seen as a shift in the attack paradigm.
Norforge's findings indicate that the attackers may have exploited the collaborative capability of AI agents—multiple agents dividing the work, with some responsible for scanning, some for breaching, and some for maintaining access.
All Facts (6)
The most active cluster, AIA0001, operates 14 panels hosting more than 1,100 attack projects; a successful intrusion took slightly under 23 hours, each project recorded an average of about 140 facts, the average success rate was close to 10%, and the cost per task was about $5.
50%UnverifiedThe incident was disclosed by the AI security company Norforge, and Reuters reported the specific list of affected enterprises.
50%UnverifiedNorforge's investigation indicates that these AI agents "operated largely autonomously", meaning the attack process was highly automated with minimal human intervention.
50%UnverifiedThe "largely autonomous operation" described by Norforge is end-to-end autonomy without human intervention, which is also the key reason this incident is seen as a shift in the attack paradigm.
50%UnverifiedNorforge's findings indicate that the attackers may have exploited the collaborative capability of AI agents—multiple agents dividing the work, with some responsible for scanning, some for breaching, and some for maintaining access.
50%UnverifiedSecurity firm Norforge disclosed on October 19 an investigation into exposed Cairn control panels, with more than 20 exposed Cairn panels possibly linked to malicious activity, and these systems were described as an "AI-driven hacking engine" that can coordinate agents toward set objectives.
50%