Skip to the rundown
GetYourBrief
Search

AI research · on the rundown Monday, October 19, 2026

Open-source Cairn agents carried out intrusions unaided, researcher says

Covered by 6 outlets over 28 hours. First reported by Ksl at 00:00 UTC on October 19, 2026.

6 outlets

What happened?

  1. A researcher claimed, in a report handed to Reuters before its Monday publication, that a hacker employed AI agents, along with a few thousand dollars, to breach websites owned by over 100 companies, among them Deere, SharkNinja and Cummins.
  2. The hacker outsourced the intrusion work almost entirely to AI agents that spent hours autonomously probing and breaking into targeted sites, Fagerland said
  3. Deere told Reuters it took "necessary remediation actions" and had "no indication that sensitive information was accessed"; SharkNinja said the hit was limited to a standalone product support site and the threat was contained; Cummins said it was "investigating the report of a potential cyber-attack on a website"
  4. IT News reported that e-commerce sites in Australia, Canada, the United States and Japan were among the targets

A researcher alleged that a hacker used AI agents built on Cairn, an open-source AI problem-solving platform, to autonomously probe and break into websites at more than 100 companies over about two weeks. Fagerland said he located roughly two dozen inadvertently exposed Cairn instances being used for malicious activity from around October 2, and described the campaign as evidence that commercially available AI agents can complete complex intrusions without human intervention. Reuters said it identified victims including Deere, SharkNinja and Cummins through the hacker's Cairn activity.

A machine summary written from the reports listed below; read them for the full account. How summaries are made and what is checked.

Who reported it, and when?

6 distinct reports run by 6 outlets, earliest first (UTC); a syndicated report lists every site that ran it
TimeReportRun by
Oct 19 00:00Report by Ksl
  • Ksl
Oct 19 13:45Report by insurancejournal.com
  • insurancejournal.com
Oct 19 13:58Report by The Verge
  • The Verge
Oct 19 18:35Report by Gizmodo
  • Gizmodo
Oct 20 03:42Report by itnews.com.au
  • itnews.com.au
Oct 20 03:45Report by en.shafaqna.com
  • en.shafaqna.com

A report's title is shown once our automated legal check has read it and passed it; these reports are named by outlet, and the links lead to each report.

Who was named?

More news naming Reuters

  1. Oct 19 · Finance Anduril tender offer would value the drone maker at about $90B 2
  2. Oct 19 · Finance China's third-quarter growth picks up to 4.5%, above estimates 2
  3. Oct 16 · Crypto Circle plans 40-market push as Allaire cites stablecoin demand 2
  4. Oct 15 · Crypto Startup Fortune: “MSCI Decides Not to Drop Strategy and Bitcoin Treasury Firms From Its Indexes” 10
  5. Oct 15 · Legal Jury hears account of alleged 1999 rape by Russell Brand 2
  6. Oct 15 · Cyber Proofpoint agrees to acquire Varonis for $6.3 billion in cash 2
  7. Oct 15 · Finance Iron ore drops under $90 a ton, lowest since 2024 2

Sources: the outlets' reports linked on this page; counts and times from GetYourBrief's record of those reports (methodology).