AI research · on the rundown Monday, October 19, 2026
Open-source Cairn agents carried out intrusions unaided, researcher says
Covered by 6 outlets over 28 hours. First reported by Ksl at 00:00 UTC on October 19, 2026.
- outlets6
- distinct reports6
- first to latest report28 h
- names in it6
What happened?
- A researcher claimed, in a report handed to Reuters before its Monday publication, that a hacker employed AI agents, along with a few thousand dollars, to breach websites owned by over 100 companies, among them Deere, SharkNinja and Cummins.
- The hacker outsourced the intrusion work almost entirely to AI agents that spent hours autonomously probing and breaking into targeted sites, Fagerland said
- Deere told Reuters it took "necessary remediation actions" and had "no indication that sensitive information was accessed"; SharkNinja said the hit was limited to a standalone product support site and the threat was contained; Cummins said it was "investigating the report of a potential cyber-attack on a website"
- IT News reported that e-commerce sites in Australia, Canada, the United States and Japan were among the targets
A researcher alleged that a hacker used AI agents built on Cairn, an open-source AI problem-solving platform, to autonomously probe and break into websites at more than 100 companies over about two weeks. Fagerland said he located roughly two dozen inadvertently exposed Cairn instances being used for malicious activity from around October 2, and described the campaign as evidence that commercially available AI agents can complete complex intrusions without human intervention. Reuters said it identified victims including Deere, SharkNinja and Cummins through the hacker's Cairn activity.
A machine summary written from the reports listed below; read them for the full account. How summaries are made and what is checked.
Who reported it, and when?
| Time | Report | Run by |
|---|---|---|
| Oct 19 00:00 | Report by Ksl |
|
| Oct 19 13:45 | Report by insurancejournal.com |
|
| Oct 19 13:58 | Report by The Verge |
|
| Oct 19 18:35 | Report by Gizmodo |
|
| Oct 20 03:42 | Report by itnews.com.au |
|
| Oct 20 03:45 | Report by en.shafaqna.com |
|
A report's title is shown once our automated legal check has read it and passed it; these reports are named by outlet, and the links lead to each report.
Who was named?
- Reuters 93 events
- AI agents 50 events
- SharkNinja
- Cummins
- Cairn
- Deere
More news naming Reuters
- Oct 19 · Finance Anduril tender offer would value the drone maker at about $90B 2
- Oct 19 · Finance China's third-quarter growth picks up to 4.5%, above estimates 2
- Oct 16 · Crypto Circle plans 40-market push as Allaire cites stablecoin demand 2
- Oct 15 · Crypto Startup Fortune: “MSCI Decides Not to Drop Strategy and Bitcoin Treasury Firms From Its Indexes” 10
- Oct 15 · Legal Jury hears account of alleged 1999 rape by Russell Brand 2
- Oct 15 · Cyber Proofpoint agrees to acquire Varonis for $6.3 billion in cash 2
- Oct 15 · Finance Iron ore drops under $90 a ton, lowest since 2024 2
Sources: the outlets' reports linked on this page; counts and times from GetYourBrief's record of those reports (methodology).