A cybersecurity researcher says a hacker using AI agents has broken into the websites of more than 100 companies, according to a report viewed by multiple outlets. The activity appears to involve a Chinese-speaking threat actor operating over a short period, with the majority of the work attributed to AI agents rather than manual actions by the attacker.
The researcher, Snorre Fagerland of NorForge, describes findings from a report on Cairn, an open-source AI platform the hacker allegedly used. Reuters adds that the approach reportedly relied on relatively low-cost tools, with the attacker spending only a few thousand dollars, and later selling access or conducting intrusions at roughly $50 each. Other coverage emphasizes the scale of the compromise and the role of AI automation in carrying out steps such as recon and exploitation.
Across outlets, the core points are consistent: the intrusion campaign targets a large number of organizations, AI agents do substantial parts of the work, and the incident highlights how publicly available AI tooling can be adapted for cybercrime. Reporting differs mainly on cost specifics and which aspects of the methodology are most emphasized.
