[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fTnVl3xegRnhrmAuVG3ASgDvk-QwB-SCBFk8ZVDuaIGk":3},{"article":4,"iocs":57,"watch_terms":65,"solutions":66,"lesson":154},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"4fd90bb6-4eb7-457b-8d4f-6315a8be9ceb","Attackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society Sectors","attackers-use-autonomous-ai-to-target-semiconductor-defense-and-civil-society-se-4f6c49","Our analysis of how attackers used the open-source Cairn AI agent framework to autonomously breach semiconductor, defense and civic targets. The post Attackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society Sectors appeared first on Unit 42.","From August–September 2026, Chinese-speaking attackers used the open-source Cairn AI penetration testing framework paired with Zhipu GLM and DeepSeek models to conduct 25 autonomous operations against at least 19 organizations. Ten targets experienced unauthorized access or data retrieval, including credential theft, exposure of over one million personal records, and persistent administrator account creation. Unit 42 assesses this activity as China-nexus intelligence collection tracked as CL-STA-1238, targeting advanced semiconductor manufacturing, U.S. defense policy, and civil society sectors.","Chinese-speaking attackers weaponized Cairn AI framework to autonomously breach semiconductor, defense, and civil","https:\u002F\u002Funit42.paloaltonetworks.com\u002Fcairn-framework-ai-autonomous-attacks\u002F","https:\u002F\u002Funit42.paloaltonetworks.com\u002Fwp-content\u002Fuploads\u002F2026\u002F11\u002FAdobeStock_992950050-5.jpg","2026-11-12T15:00:31+00:00","2026-11-12T16:00:15.732851+00:00",9,[17,20,23,26,28],{"name":18,"type":19},"CL-STA-1238","campaign",{"name":21,"type":22},"Cairn AI agent framework","technology",{"name":24,"type":25},"Zhipu GLM","product",{"name":27,"type":25},"DeepSeek",{"name":29,"type":30},"Palo Alto Networks","vendor","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":31,"icon":33,"name":34,"slug":35},null,"Malware","malware",[37,42,47,52],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":48},{"id":49,"icon":33,"name":50,"slug":51},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":53},{"id":54,"icon":33,"name":55,"slug":56},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[58,62],{"type":59,"value":60,"context":61},"ip","154.44.31.4","Attacker-operated Cairn framework server hosted in Hong Kong (AS979, NetLab Global)",{"type":59,"value":63,"context":64},"82.29.129.54","Attack egress and staging node in the U.S. (AS142036, Hosteons Pte. Ltd.)",[29,24,27],{"controls":67,"vendors":150},[68,97,123],{"slug":69,"name":70,"problem":71,"products":72},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[73,81,89],{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-itdr","Huntress Managed ITDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-itdr","Managed detection of suspicious activity in Microsoft 365 and Entra ID.",{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"slug":98,"name":99,"problem":100,"products":101},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[102,110,118],{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":119,"product_name":120,"url":121,"description":122},"managed-edr","Huntress Managed EDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-edr","Endpoint detection and response monitored around the clock by Huntress analysts.",{"slug":51,"name":124,"problem":125,"products":126},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[127,135,142],{"vendor_slug":128,"vendor_name":129,"vendor_logo":130,"product_slug":131,"product_name":132,"url":133,"description":134},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",{"vendor_slug":136,"vendor_name":29,"vendor_logo":137,"product_slug":138,"product_name":139,"url":140,"description":141},"palo-alto-networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",{"vendor_slug":143,"vendor_name":144,"vendor_logo":145,"product_slug":146,"product_name":147,"url":148,"description":149},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",[151],{"slug":136,"name":29,"logo_path":137,"roles":152},[153],"reported_by",{"slug":155,"title":156,"body":157,"framework_refs":158,"framework_notes":164},"autonomous-ai-driven-attacks-breach-semiconductor-and-defense-targets","Autonomous AI-Driven Attacks Breach Semiconductor and Defense Targets","Chinese-nexus attackers leveraged an open-source AI penetration testing framework (Cairn) combined with large language models to autonomously conduct 25 intrusion operations across 19 organizations in just two months, with roughly half resulting in confirmed unauthorized access or data theft. The use of autonomous AI dramatically lowers the cost and expertise barrier for sustained, multi-target intelligence collection campaigns. Credential theft and persistent administrator account creation indicate that privileged access management and monitoring controls were insufficient to detect or stop the intrusions in time. The exposure of over one million personal records underscores the downstream data protection consequences when access controls fail. This incident signals a new threat paradigm where AI-accelerated attack cycles will outpace traditional human-speed detection and response.",[159,160,161,162,163],"CIS Control 6: Access Control Management (v8)","CIS Control 13: Network Monitoring and Defense (v8)","NIST SP 800-53 AC-2: Account Management","NIS2 Article 21(2)(i)","MITRE ATT&CK T1078: Valid Accounts",{"NIS2 Article 21(2)(i)":165,"MITRE ATT&CK T1078: Valid Accounts":166,"NIST SP 800-53 AC-2: Account Management":167,"CIS Control 6: Access Control Management (v8)":168,"CIS Control 13: Network Monitoring and Defense (v8)":169},"This point mandates human resources security, access control, and asset management practices that would have restricted the attacker's ability to escalate privileges and maintain persistent access across targeted organizations.","The attackers exploited stolen credentials and created rogue administrator accounts to maintain access, which is precisely the technique T1078 describes and for which detection controls should be specifically tuned.","AC-2 requires organizations to monitor, review, and disable unauthorized accounts—controls that, if implemented, would have detected and prevented the persistent administrator accounts attackers created.","This control requires managing and restricting privileged access and credentials—directly addressing the attacker's ability to create persistent administrator accounts and steal credentials without detection.","This control calls for continuous monitoring of network traffic and anomalous activity, which would have been critical for detecting the high-velocity, autonomous scanning and lateral movement patterns of the Cairn AI framework."]