{
  "id": 15600375,
  "title": "Hacker used AI agents and just a few thousand dollars to break into scores of sites",
  "url": "https://urgent.news/2026/10/19/hacker-used-ai-agents-and-just-a-few-thousand-dollars-to-break-into",
  "topic": "ai",
  "section": "AI",
  "published": "2026-10-19T11:28:59.000Z",
  "source": {
    "name": "The Business Times - Companies & Markets",
    "slug": "the-business-times-companies-markets",
    "url": "https://www.businesstimes.com.sg/companies-markets/telcos-media-tech/hacker-used-ai-agents-and-just-few-thousand-dollars-break-scores-sites"
  },
  "original_language": "en",
  "account": "A Chinese-speaking hacker used artificial intelligence agents and a few thousand dollars to infiltrate the websites of over 100 companies, including Deere, SharkNinja, and Cummins. The cybercriminal relied heavily on AI agents to spend hours autonomously probing and breaching targeted sites, as reported by Snorre Fagerland, a principal threat researcher at NorForge. Fagerland discovered about 24 instances of Cairn, an open-source AI problem-solving platform popular with hackers, being used maliciously, enabling him to observe the cybercriminal's actions. While the extent of data breaches remains unclear, affected companies have taken necessary remediation actions or stated no sensitive information was accessed. The Chinese-speaking hacker, who attempted to break into more than 1,200 sites over several weeks, was the most prolific. They used a mixture of China’s DeepSeek and Anthropic’s Claude Code, spending around $50 per successful hack, with a total cost of roughly $5,000. One hacker stole credit card data, while another attempted to rob a cryptocurrency exchange. The hacker acknowledged receipt of a Reuters message but denied Cairn's platform was designed for hacking attacks. The rise of agentic AI systems, capable of autonomously discovering vulnerabilities, conducting intrusions, and stealing data, has increased concerns worldwide.",
  "summary": "Successful intrusions typically took around 23 hours of poking and prodding for vulnerabilities",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}