[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbk4nJBoE3tVWkrTQj0gyTKLVu2RY_iY7SjFO_eke0Pk":3},{"article":4,"iocs":56,"watch_terms":60,"solutions":61,"lesson":153},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":33,"category":34,"article_tags":38},"2f6c00ce-dbbd-4a6b-b91c-5b4fa13636b8","Attackers breached 10 organizations with an open-source AI pentest framework","attackers-breached-10-organizations-with-an-open-source-ai-pentest-framework-5910ad","Chinese-speaking attackers used Cairn, an open-source AI penetration testing framework, to run 25 operations against at least 19 organizations in August and September 2026. Palo Alto Networks’ Unit 42 found that the attackers gained unauthorized access or pulled data at 10 of them, often after typing little more than a domain name and a one-line goal. Most of the targets fall into three groups: seven in the semiconductor and advanced-manufacturing supply chain, three in defense … More → The post Attackers breached 10 organizations with an open-source AI pentest framework appeared first on Help Net Security.","Chinese-speaking attackers utilized the open-source AI penetration testing framework Cairn to conduct 25 operations against at least 19 organizations in August and September 2026. Palo Alto Networks' Unit 42 reported that the attackers successfully gained unauthorized access or exfiltrated data from 10 of these organizations. The targets included entities in the semiconductor and advanced-manufacturing supply chain, defense, and human rights sectors.","Chinese-speaking attackers used an AI pentest framework to breach 10 organizations.","https:\u002F\u002Fwww.helpnetsecurity.com\u002F2026\u002F11\u002F12\u002Fcairn-autonomous-ai-cyberattacks\u002F","https:\u002F\u002Fimg.helpnetsecurity.com\u002Fwp-content\u002Fuploads\u002F2026\u002F11\u002F11171410\u002Fkey-red-1500.webp","2026-11-12T15:00:29+00:00","2026-11-12T16:00:15.169205+00:00",8,[17,20,23,26,29,31],{"name":18,"type":19},"China-nexus intelligence collection","threat_actor",{"name":21,"type":22},"AI","technology",{"name":24,"type":25},"Cairn","product",{"name":27,"type":28},"Palo Alto Networks","vendor",{"name":30,"type":25},"Zhipu GLM 5.2",{"name":32,"type":25},"DeepSeek V4 Flash","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":33,"icon":35,"name":36,"slug":37},null,"Threat Intelligence","threat-intelligence",[39,44,49,54],{"category":40},{"id":41,"icon":35,"name":42,"slug":43},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":45},{"id":46,"icon":35,"name":47,"slug":48},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":50},{"id":51,"icon":35,"name":52,"slug":53},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":55},{"id":33,"icon":35,"name":36,"slug":37},[57],{"type":58,"value":24,"context":59},"malware","open-source AI penetration testing framework used by attackers",[27,24,30],{"controls":62,"vendors":147},[63,92,118],{"slug":64,"name":65,"problem":66,"products":67},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[68,76,84],{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-itdr","Huntress Managed ITDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-itdr","Managed detection of suspicious activity in Microsoft 365 and Entra ID.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-identity-protection","Falcon Identity Protection","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fnext-gen-identity-security\u002Fidentity-protection\u002F","Detection of identity attacks against Active Directory and Entra ID, with risk-based MFA.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"slug":93,"name":94,"problem":95,"products":96},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",[97,105,110],{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"wiz","Wiz","\u002Fvendor-logos\u002Fwiz.png","wiz-cloud","Wiz Cloud","https:\u002F\u002Fwww.wiz.io\u002Fplatform\u002Fwiz-cloud","Agentless cloud security posture and attack path analysis across major cloud providers.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":106,"product_name":107,"url":108,"description":109},"falcon-cloud-security","Falcon Cloud Security","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fcloud-security\u002F","Cloud posture management and workload protection.",{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"orca-security","Orca Security","\u002Fvendor-logos\u002Forca-security.png","orca-cloud-security-platform","Orca Cloud Security Platform","https:\u002F\u002Forca.security\u002Fplatform\u002F","Agentless cloud security platform for posture, vulnerabilities and data exposure.",{"slug":119,"name":120,"problem":121,"products":122},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[123,131,139],{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","gravityzone","GravityZone","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fgravityzone-platform\u002F","Endpoint protection, detection and response platform.",{"vendor_slug":132,"vendor_name":133,"vendor_logo":134,"product_slug":135,"product_name":136,"url":137,"description":138},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"vendor_slug":140,"vendor_name":141,"vendor_logo":142,"product_slug":143,"product_name":144,"url":145,"description":146},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",[148],{"slug":149,"name":27,"logo_path":150,"roles":151},"palo-alto-networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png",[152],"reported_by",{"slug":154,"title":155,"body":156,"framework_refs":157,"framework_notes":163},"open-source-ai-pentest-tool-weaponized-against-critical-sector-organizations","Open-Source AI Pentest Tool Weaponized Against Critical-Sector Organizations","Chinese-speaking threat actors repurposed the open-source AI penetration testing framework Cairn to automate attacks across 25 operations, successfully breaching 10 of 19 targeted organizations in just two months. The attackers focused on high-value targets in semiconductors, advanced manufacturing, defense, and human rights — sectors that represent both economic and geopolitical intelligence priorities. This incident demonstrates that freely available offensive security tooling dramatically lowers the barrier to entry for sophisticated, scalable attacks. Organizations in critical supply chains must assume that tools designed for defenders will be turned against them, and must harden their attack surfaces accordingly.",[158,159,160,161,162],"CIS Control 7: Continuous Vulnerability Management (v8)","CIS Control 1: Inventory and Control of Enterprise Assets (v8)","NIST CSF 2.0 DE.CM-01: Continuous Monitoring","NIS2 Article 21(2)(d)","MITRE ATT&CK T1595: Active Scanning",{"NIS2 Article 21(2)(d)":164,"MITRE ATT&CK T1595: Active Scanning":165,"NIST CSF 2.0 DE.CM-01: Continuous Monitoring":166,"CIS Control 7: Continuous Vulnerability Management (v8)":167,"CIS Control 1: Inventory and Control of Enterprise Assets (v8)":168},"NIS2 Article 21(2)(d) requires security measures covering supply chain risks; the attackers deliberately targeted semiconductor and advanced-manufacturing supply chain entities, making supply chain-aware security governance directly relevant.","The Cairn framework's automated operations align with T1595, where adversaries conduct active reconnaissance scanning to identify exploitable systems — the technique that enabled attackers to efficiently target 19 organizations in a short timeframe.","This category requires continuous monitoring of networks and assets for anomalies; automated AI-driven attack campaigns generating high volumes of structured activity would be detectable through the network monitoring practices this control mandates.","CIS Control 7 requires organizations to continuously assess and remediate vulnerabilities; had targeted organizations maintained continuous vulnerability management, the attack surface available to Cairn's automated scanning would have been significantly reduced.","CIS Control 1 requires a complete inventory of enterprise assets, which is a prerequisite for understanding and minimizing the attack surface that an AI-driven automated pentesting framework can enumerate and exploit."]