Open Cairn panels expose AI intrusion campaigns and secrets

NorForge’s October 19 investigation identified more than 20 internet-exposed Cairn panels likely associated with malicious activity. The project records show operators directing agents through sustained security testing, while also exposing target details, operator notes, and hundreds of secrets. (NorForge report)

The largest cluster NorForge describes had 14 panels and more than 1,100 projects. Operators supplied targets and objectives; an automated pipeline checked candidate sites before submitting work to Cairn. Within Cairn, agents recorded findings and next steps, while operators could add hints. The report also found apparently legitimate red-team work on exposed panels, which could disclose sensitive client data.

NorForge estimates an average success rate near 10 percent across the activity it observed. It cautions that the clusters had different goals and that “success” varied. Researchers independently validated one claimed intrusion by confirming a live web shell. That check does not validate every project marked successful in the panels.

The exposed control plane created a separate risk from the target systems. NorForge found hundreds of secrets in panel data and says 11 percent were verified valid by its secret-scanning workflow. The report documents exposed records and credentials. It does not establish that an unauthenticated visitor could start, stop, redirect, or otherwise control the agents; NorForge says it did not test whether those controls worked without authorization.

Reuters identifies three organizations linked to one operator’s activity

Reuters reported identifying Deere, SharkNinja, and Cummins after reviewing one operator’s activity in Cairn. Deere told Reuters it had no indication that sensitive information was accessed. SharkNinja said a standalone product-support site was affected and the threat had been contained. Cummins said it was investigating a potential attack on a third-party vendor site. Reuters could not determine the extent of unauthorized data extraction. The report says the operator began the campaign on September 25, made more than 1,200 attempts, and breached more than 100 websites. NorForge researcher Snorre Fagerland estimated about $5,000 in token spending and roughly $50 per successful hack. These campaign figures describe one operator; the cost figures are estimates, and they do not validate every success marker in the exposed Cairn panels. (Reuters)

For defenders, the report points to the orchestration layer as part of the attack surface. Keep agent and testing consoles off the public internet or behind strong access controls. Treat project histories, shared task boards, and operator notes as sensitive. Rotate credentials found in them, isolate workers, and restrict their network access. For target organizations, investigate unexpected server-side files, command execution, and persistence through the usual incident-response process.

The cases show operators setting goals and delegating long sequences of probing to software. They also show how an exposed agent dashboard can reveal the operation’s work and the data it collected.