---
title: "[AUTO] Autonomous AI agents executed real breach campaign against 100+ companies"
pubDatetime: 2026-10-20T21:51:00.000Z
description: "NorForge documents first autonomous agent breach campaign, targeting 1,200+ websites for $5K."
tags: [ai-agents, ai-security, vulnerability, supply-chain, rogue-agents, 2026, 2026-q4, 2026-10, AUTO]
---
[NorForge discovered 20+ exposed Cairn control panels](https://norforge.com/blog/inside_cairn), an autonomous penetration testing engine, used in real breaches targeting 100+ companies including Deere, SharkNinja, and Cummins across the US, Japan, and Australia.

A Chinese-speaking operator breached over 1,200 websites, costing roughly $50 per successful breach ($5,000 total campaign) using DeepSeek models. Average breach time: 23 hours. Operator input: fewer than 100 Chinese characters.

[A 10% success rate](https://thehackernews.com/2026/10/hackers-use-autonomous-ai-agents-to.html) across all targets shows this isn't a one-off. It's the first documented autonomous agent campaign at this scale: complex multi-hour attacks executed with minimal human supervision. Minimal effort, minimal cost, repeatable.

The barrier to real-company breaches is now low.

---

*Sources: [Inside Cairn: Open Windows into massive AI-Driven Cyber Operations](https://norforge.com/blog/inside_cairn)  •  [NorForge Details 20+ Exposed Cairn Panels Used in AI-Driven Intrusions](https://www.unite.ai/norforge-details-20-plus-exposed-cairn-panels-used-in-ai-driven-intrusions/)*

*Coverage: [Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites](https://thehackernews.com/2026/10/hackers-use-autonomous-ai-agents-to.html)*

*Related on this blog: [[AUTO] AI Agents as Supply-Chain Attack Surface](/posts/auto-ai-supply-chain-attack)  •  [[AUTO] Paperclip's Real Problem: When Configuration Is Code](/posts/auto-paperclip-agent-rce)  •  [[AUTO] Malware campaigns weaponize AI platform trust](/posts/auto-ai-malware-delivery)*