Attackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society Sectors

Summary

From August to September 2026, Chinese-speaking attackers used Cairn, an open-source AI penetration testing framework, paired with Zhipu GLM and DeepSeek models, to autonomously conduct 25 operations against at least 19 organizations. The attackers supplied a target and a goal, and Cairn planned and executed the operations on its own. At 10 organizations, the activity achieved unauthorized access or data retrieval, which Unit 42 tracks as CL-STA-1238 with moderate confidence as China-nexus intelligence collection.

Related items

• MediumCVE-2026-127202: MLflow path traversal through model_id in the log outputs APISimilar attack · NVD/CVE Database
• LowAI chatbots are recommending fake retail websites, study findsSimilar attack · The Verge (AI)
• MediumPalo Alto tracks a massive Chinese AI attack that sadly lives up to industry fearsSimilar attack · CSO Online
• MediumCVE-2026-126994: braindecode model config deserialization flaw via activation argumentSimilar attack · NVD/CVE Database
• MediumAI found Linux kernel bugs that remained undetected for decadesSimilar attack · CSO Online