Hackers abuse AI pen-test tool Cairn to breach hundreds of sites

A Chinese-speaking threat actor exploited the AI-powered penetration-testing tool Cairn to automate attacks against hundreds of websites worldwide, stealing data from major companies including John Deere, SharkNinja, and Cummins.

Disclosed 20 October 2026 · Record updated 20 October 2026

Impact

Hundreds of websites compromised and data stolen from major companies including John Deere, SharkNinja, and Cummins.

Our coverage

A swarm of mechanical locusts, their metallic bodies glinting in darkness, strips bare the walls of countless factories while their creator watches from shadows.

Incidents

Hackers abuse AI pen-test tool Cairn in mass website attacks

Dark Reading reports that a Chinese-speaking attacker used the AI-powered penetration-testing tool to automate intrusions at hundreds of sites, including John Deere and Cummins.

20 Oct 2026

Sources

darkreading.comhttps://darkreading.com/cyberattacks-data-breaches/hackers-abuse-ai-pen-test-tool-cairn