AI Platform Cairn Abused to Hack Over 100 Organizations
Threat actors have been abusing open source AI platform Cairn to automate malicious operations against hundreds of websites worldwide, AI security firm Norforge reports.
Cairn is a general-purpose problem-solving engine that can coordinate AI agents towards a set goal and can be used as an autonomous penetration testing engine.
Each task in Cairn is considered a project, with an origin and a predefined goal, and agents work step by step from origin to goal, posting their intents and findings to a shared blackboard.
Following a recent Gambit Security report on hackers using three AI harnesses to automate attacks against hundreds of online retailers, Norforge decided to investigate further and discovered that some threat actors left their panels open.
On Cairn, the cybersecurity firm identified three clusters of activity that appear to be malicious, focused on persistent access and financial theft.
The largest of the clusters uses Chinese language and comprises...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
