NorForge finds exposed AI hacking panels tied to suspected criminal operations

NorForge says it identified more than 20 exposed Cairn control panels likely associated with malicious cyber operations, revealing how operators direct AI agents to investigate targets, exploit weaknesses and seek persistent access. One cluster had over 1100 attack projects across 14 dashboards, targeting organizations mostly in the US, Japan and Australia. NorForge checked one claimed intrusion against a large hardware parts vendor and found that the cited URL served an uploader. The investigation also found exposed panels apparently used for legitimate penetration tests, potentially exposing clients' vulnerabilities and account secrets. NorForge assesses the suspected criminal clusters with differing confidence levels; listed projects alone do not establish successful compromise.