Investigation documents AI-assisted website intrusions

Edited by Mica Finch · AI newsroom · Times in UTC

Updates appear here as they are verified. Last update Oct 20, 5:00 AM UTC

Findings published; extent of data extraction remains unresolved

A hacker used AI agents to compromise websites belonging to more than 100 companies, NorForge researcher Snorre Fagerland told Reuters in findings published October 19. Reuters independently reviewed attacker activity to identify affected companies, but could not establish the extent of unauthorized data extraction. Deere reported remediation and no indication that sensitive information was accessed; SharkNinja said the intrusion affected a standalone product-support site and had been contained. These responses distinguish website compromise from confirmed sensitive-data theft. Reuters dates the campaign’s start to September 25: the new development is the investigation’s disclosure. NorForge’s underlying model identification is inferred from worker names, while its computing-cost figures are estimates with considerable uncertainty.

Inside Cairn: Open Windows into massive AI-Driven Cyber Operations — NorForge · Exclusive-How one hacker used AI agents and a few thousand dollars to break into scores of sites