--- title: One Hacker, $5,000, 100+ Breaches: The Autonomous AI... description: A single hacker used commercial AI agents, including DeepSeek and Anthropic's Claude Code orchestrated through a platform called Cairn, to autonomously breach... canonical: https://daily.dev/posts/one-hacker-5-000-100-breaches-the-autonomous-ai-attack-cisos-can-t-ignore-octy5nn5f twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: One Hacker, $5,000, 100+ Breaches: The Autonomous AI Attack CISOs Can’t Ignore | daily.dev og:description: A single hacker used commercial AI agents, including DeepSeek and Anthropic's Claude Code orchestrated through a platform called Cairn, to autonomously breach... og:url: https://daily.dev/posts/one-hacker-5-000-100-breaches-the-autonomous-ai-attack-cisos-can-t-ignore-octy5nn5f og:image: https://api.daily.dev/og/posts/OCtY5Nn5F.png og:image:alt: One Hacker, $5,000, 100+ Breaches: The Autonomous AI Attack CISOs Can’t Ignore og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # One Hacker, $5,000, 100+ Breaches: The Autonomous AI Attack CISOs Can’t Ignore **[Security Boulevard](https://daily.dev/sources/securityboulevard)** · 9 min read · 0 upvotes · 0 comments ## Summary A single hacker used commercial AI agents, including DeepSeek and Anthropic's Claude Code orchestrated through a platform called Cairn, to autonomously breach over 100 companies. Reuters reported the operator attempted intrusions against more than 1,200 sites, often with under 100 characters of instruction and roughly 23 hours of unsupervised agent activity per target. Researcher Snorre Fagerland estimated the total cost at around $5,000 in AI tokens, about $50 per successful breach. When agents hit a hardened application, they pivoted on their own to a less-protected control panel and exploited a subtle flaw there, without human input. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How did a hacker use AI agents like Claude Code and DeepSeek to breach over 100 companies? A Chinese-speaking operator orchestrated DeepSeek and Anthropic's Claude Code through an open-source platform called Cairn, giving terse instructions (often under 100 characters) and letting the agents run unsupervised for about 23 hours per target. The campaign attempted breaches against more than 1,200 sites and compromised over 100, including Deere, SharkNinja, and Cummins, at roughly $50 per successful breach. _Teams weighing the risk of agentic AI misuse can track incidents like this one on daily.dev._ ### What made this AI-driven hacking campaign different from typical automated vulnerability scanning? When the AI agents hit a well-defended, public-facing application, they didn't stop; they independently searched for related infrastructure, found a less-protected control panel, and spent hours probing it until they chained a subtle data-handling flaw into full compromise. Researcher Snorre Fagerland called this autonomous pivoting 'astounding' and said it was 'not script kiddie stuff,' since he expected such attacks to still need human supervision. _Developers hardening infrastructure against autonomous recon can follow writeups like this on daily.dev._ ### What is Adversarial Exposure Validation (AEV) and how does it differ from a penetration test? Adversarial Exposure Validation is the practice of continuously and safely emulating real attacker techniques, such as reconnaissance, lateral movement, and exploitation chains, against your own environment to prove which exposures are actually reachable and exploitable, rather than relying on a risk score. Unlike a penetration test, which only reflects what was exploitable on the day it ran against a predefined scope, AEV runs continuously rather than on a quarterly or annual cycle. _Security teams evaluating continuous validation tools can compare approaches like AEV on daily.dev._ ## Similar posts on daily.dev - [I Asked 100 Agents to Hack Me](https://daily.dev/posts/i-asked-100-agents-to-hack-me-wrbcfxglt) · Tech Lead Digest · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#ai-agents](https://daily.dev/tags/ai-agents), [#claude-code](https://daily.dev/tags/claude-code) [View this post on daily.dev](https://daily.dev/posts/one-hacker-5-000-100-breaches-the-autonomous-ai-attack-cisos-can-t-ignore-octy5nn5f) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"One Hacker, $5,000, 100+ Breaches: The Autonomous AI Attack CISOs Can’t Ignore","url":"https://daily.dev/posts/one-hacker-5-000-100-breaches-the-autonomous-ai-attack-cisos-can-t-ignore-octy5nn5f","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/one-hacker-5-000-100-breaches-the-autonomous-ai-attack-cisos-can-t-ignore-octy5nn5f"},"datePublished":"2026-10-22T18:22:32.876Z","dateModified":"2026-10-22T18:45:40.560Z","description":"A single hacker used commercial AI agents, including DeepSeek and Anthropic's Claude Code orchestrated through a platform called Cairn, to autonomously breach...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e10a9fd56168bca77bc928400d2ce3f3?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e10a9fd56168bca77bc928400d2ce3f3?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Security Boulevard","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Security Boulevard","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/3613c832180040de8d85bb29f74395be","url":"https://daily.dev/sources/securityboulevard"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/one-hacker-5-000-100-breaches-the-autonomous-ai-attack-cisos-can-t-ignore-octy5nn5f","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,ai-agents,claude-code","timeRequired":"PT9M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Security Boulevard","item":"https://daily.dev/sources/securityboulevard"},{"@type":"ListItem","position":3,"name":"One Hacker, $5,000, 100+ Breaches: The Autonomous AI Attack CISOs Can’t Ignore"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/one-hacker-5-000-100-breaches-the-autonomous-ai-attack-cisos-can-t-ignore-octy5nn5f#faq","mainEntity":[{"@type":"Question","name":"How did a hacker use AI agents like Claude Code and DeepSeek to breach over 100 companies?","acceptedAnswer":{"@type":"Answer","text":"A Chinese-speaking operator orchestrated DeepSeek and Anthropic's Claude Code through an open-source platform called Cairn, giving terse instructions (often under 100 characters) and letting the agents run unsupervised for about 23 hours per target. The campaign attempted breaches against more than 1,200 sites and compromised over 100, including Deere, SharkNinja, and Cummins, at roughly $50 per successful breach. Teams weighing the risk of agentic AI misuse can track incidents like this one on daily.dev."}},{"@type":"Question","name":"What made this AI-driven hacking campaign different from typical automated vulnerability scanning?","acceptedAnswer":{"@type":"Answer","text":"When the AI agents hit a well-defended, public-facing application, they didn't stop; they independently searched for related infrastructure, found a less-protected control panel, and spent hours probing it until they chained a subtle data-handling flaw into full compromise. Researcher Snorre Fagerland called this autonomous pivoting 'astounding' and said it was 'not script kiddie stuff,' since he expected such attacks to still need human supervision. Developers hardening infrastructure against autonomous recon can follow writeups like this on daily.dev."}},{"@type":"Question","name":"What is Adversarial Exposure Validation (AEV) and how does it differ from a penetration test?","acceptedAnswer":{"@type":"Answer","text":"Adversarial Exposure Validation is the practice of continuously and safely emulating real attacker techniques, such as reconnaissance, lateral movement, and exploitation chains, against your own environment to prove which exposures are actually reachable and exploitable, rather than relying on a risk score. Unlike a penetration test, which only reflects what was exploitable on the day it ran against a predefined scope, AEV runs continuously rather than on a quarterly or annual cycle. Security teams evaluating continuous validation tools can compare approaches like AEV on daily.dev."}}]} ```