Cairn: Open windows into AI-driven cyber operations
Security researchers have discovered that several AI-driven penetration-testing platforms, such as Cairn, are being left exposed on the public internet. These unsecured panels provide threat actors with tools to coordinate autonomous cyberattacks and reveal sensitive target information.
Why it matters
The exposure of these powerful AI hacking tools creates a significant security risk, as they can be easily hijacked or used by malicious actors to automate cyber operations.
An investigation by NorForge into publicly exposed AI-driven penetration-testing control panels has uncovered how they are extensively used in malicious cyber operations. One of these is Cairn.
In this setting, Cairn is an AI-powered hacking system. Give it a target and an objective, and it can coordinate AI agents to investigate the target, search for security weaknesses, and attempt to break in.
More than 20 exposed Cairn panels were identified as likely associated with malicious activity, providing an unusually detailed view of how threat actors select targets, direct autonomous agents, exploit vulnerabilities, and establish persistent access to compromised systems.
In addition, a considerable number of apparently legitimate red team operations were also exposed this way, potentially placing clients at risk.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in