A hacker broke into John Deere and SharkNinja with an army of AI agents

Summary

A hacker used an army of AI agents, mostly operating autonomously, to break into more than 100 websites, according to the AI security firm Norforge. Reuters reports the victims included John Deere, SharkNinja and Cummins, though Norforge does not name the targets.

Topics

• AI agents

Related items

• MediumGHSA-2658-85cv-9wwq: Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTMLSimilar attack · GitHub Advisory Database
• MediumGHSA-953h-535j-jg2v: agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeableSimilar attack · GitHub Advisory Database
• InfoInside the Underground Market for Know Your Client ServicesSimilar attack · BleepingComputer
• MediumCVE-2026-112081: hankcs HanLP deserialization through classpath in hanlp.loadSimilar attack · NVD/CVE Database
• MediumCVE-2026-111991: WongKinYiu yolov9 code injection via ONNX Metadata HandlerSimilar attack · NVD/CVE Database