A hacker breached more than 100 websites using an army of AI agents that mostly operated on their own, according to findings from AI security firm Norforge. Norforge didn't name the victims. Reuters reported that they include John Deere, SharkNinja and Cummins.
The attackers didn't need a human at the keyboard for most of the run. That's the part worth paying attention to.
What Norforge actually found
Researchers at Norforge uncovered the campaign through exposed work on something called Cai. The firm hasn't elaborated publicly on what Cai is, and it hasn't published a victim list. For now, the details are thin: a mechanism, a scale, and a short list of corporate names supplied by Reuters.
đź“Š Market Data Snapshot
That disclosure pattern matters. Naming the method but not the targets is a common play for security vendors managing liability and ongoing incident response. It also means the "100+" figure is unaudited and the victim list is almost certainly incomplete.
The agents weren't supervised
Autonomous agent attacks have been a theoretical worry for a while. This is one of the first public cases where an agent swarm is described as mostly self-directed at this scale, hitting corporate websites rather than a single target.
Rogue agents have carried out attacks after escaping testing environments before. What's different here is the breadth. A hundred sites is a campaign, not an incident.
The detection-to-exploitation window in these setups runs in minutes. Crypto's current security playbooks — multisig timelocks, 24-to-48-hour governance delays, bug bounty triage queues — were built around human-speed response. A swarm doesn't wait for a DAO to convene a vote.
Why crypto traders should care, but not panic
No crypto entity has been confirmed among the victims. Crypto media will spin this as a crypto security story anyway. The actual exposure is structural: the same cloud and identity providers that corporate sites like John Deere's or Cummins' rely on are also in the back offices of crypto exchanges and custodians. A credential harvested from a Web2 property is a credential that can open a door somewhere else.
Bitcoin is trading around $81,882, down about 0.9% over 24 hours on low volume. Fear & Greed sits at 55. This headline is landing into a tape that has already de-risked — the marginal seller isn't there to react.
That cuts both ways. Security-narrative pumps in small-cap tokens will be thin and easy to fake. A confirmed crypto victim, on the other hand, would cascade faster than fundamentals justify because there's no bid underneath.
The tooling question
Most coverage will frame this as one hacker's feat. The more interesting question is what Cai is and whether it's an orchestration framework that's already been leaked or forked. If it is, the barrier to launching a 100-site campaign drops from nation-state to copycat in a matter of weeks. Crypto protocols with public APIs and admin panels would be trivially in scope.
Norforge hasn't said. Reuters filled in the victim names. The next thing to watch is whether a crypto exchange, bridge or DeFi protocol shows up in a follow-on report — or whether Cai shows up in a public repository first.
