Incident2026-10-19

A Chinese-speaking hacker used AI agents to break into 100+ company websites. The agents ran on a worker named claudecode_deepseek-v4.1-flash. Victims included Deere, SharkNinja and Cummins. The campaign targeted online shops in the US, Canada, Japan and Australia. Agents aimed to plant web shells for lasting access to payment systems. NorForge found 1,100 attack projects across 14 linked panels. The estimated cost was about $50 per successful hack. Open Cairn control panels exposed hundreds of credentials and API keys. Cairn’s author said the platform was not designed for hacking. NorForge is working to warn victims and take panels down.

What it unlocks

Automated hacking of websites at scale using AI agents with minimal human oversight.

  • 100+ sites breached
  • $50 per hack
  • 1,100 attack projects
  • 10% success rate

Send this to someone who needs it

Shares the story and its sources. Nothing about you.

What does this mean for your job?

This is the story as everyone gets it. Once a week we send you the version written for your role — what changed, why it matters for the work you actually do, and one thing to try. Free while we tune it.