Product
CAIRN
- First Reported
- Sep 22, 2026
- Latest Reported
- Oct 20, 2026
Reported Context (3)
- The researcher, Snorre Fagerland of the security firm NorForge, found the operations by scanning the internet for exposed copies of Cairn, an open-source AI tool popular with hackers. AI Agents Targeted More Than 1,200 Websites, Reaching Over 100 Companies
- Threat actors have been abusing open source AI platform Cairn to automate malicious operations against hundreds of websites worldwide, AI security firm Norforge reports. Threat Actors Abuse Cairn AI Platform in Attacks on More Than 100 Organizations
- Cisco Talos released CAIRN, an open-source framework that classifies AI-integrated malware using only file metadata and cognitive artifacts, without downloading or executing samples. Cisco Talos Details AI-Directed Windows Malware and CAIRN Analysis Framework
Malware (2)
People (3)
MITRE ATT&CK (5)
Vendors (1)
Products (2)
Tools (3)
Industries (3)
Countries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.