AI-Powered Hackers Breach Numerous Systems

Artificial intelligence technologies are increasingly being used not only to strengthen cybersecurity but also by malicious actors to automate cyberattacks. A recently uncovered cyberattack campaign demonstrates how AI agents can now target a large number of corporate systems with limited human intervention.

More Than 100 Companies Targeted

According to research published in October 2026, a Chinese-speaking hacker used AI agents to launch attacks against more than 1,200 websites. These attempts reportedly resulted in unauthorized access to the systems of more than 100 companies.

The targeted organizations included major companies such as agricultural machinery manufacturer Deere, home appliance brand SharkNinja, and engine manufacturer Cummins. However, it has not been confirmed that sensitive data was stolen in every incident. Some companies stated that they had taken the necessary security measures, while others were still investigating the incidents.

AI Agents Used to Carry Out Attacks

One of the most striking aspects of the campaign was that the hacker relied on AI agents to perform much of the work rather than carrying out every operation manually. Reports indicate that the open-source Cairn platform, which enables multiple AI agents to coordinate their activities, was used during the attacks.

With this system, AI agents can inspect target websites, search for potential security vulnerabilities, and try alternative methods when previous attempts fail. By providing initial instructions and allowing the agents to operate autonomously for extended periods, the attacker was able to increase the scale of the campaign.

The research also indicated that DeepSeek and Anthropic's Claude Code technologies were used together. Each successful intrusion reportedly took an average of approximately 23 hours.

The Cost of Attacks Raises Concerns

Snorre Fagerland, a security researcher at NorForge, estimated that the campaign generated approximately $5,000 in AI usage costs. This translates to roughly $50 per successful breach.

These estimates demonstrate how AI-powered attacks can be scaled at relatively low costs compared with traditional methods. A single attacker can now investigate numerous targets simultaneously, significantly increasing the potential capabilities of cybercriminals.

How Should Companies and Server Administrators Protect Their Systems?

The growing use of AI-powered attacks makes it increasingly important for companies and server administrators to review their security policies. Regularly inspecting internet-facing services and keeping them updated are among the most important precautions.

Key security measures include:

• Regularly installing security updates for operating systems, control panels, and web applications.

• Protecting management panels such as WHM, cPanel, and Plesk with access restrictions whenever possible.

• Enabling multi-factor authentication for all administrator accounts.

• Keeping firewall and WAF rules up to date.

• Regularly reviewing server access logs and unusual connection attempts.

• Disabling unused services and unnecessary open ports.

• Storing API keys, credentials, and other sensitive information securely.

A New Era in Cybersecurity

The ability of AI agents to perform complex tasks without constant human intervention is creating a new category of cybersecurity risks. Processes that previously required extensive technical work can now be carried out using automated systems.

This development affects not only large corporations but also hosting providers, e-commerce platforms, small businesses, and individual server owners. As attackers are expected to make greater use of artificial intelligence, keeping systems updated and maintaining effective security controls will become more important than ever.