A single operator used three open-source AI tools — Strix for vulnerability scanning, Cairn for autonomous exploitation, and Hermes for campaign orchestration — to target 105 online retailers between …
Gambit Security reconstructed an autonomous AI agent campaign that used three open-source tools — Strix, Cairn, and Hermes — to breach more than 100 online retailers, steal over 600,000 credit card re…
An attacker used open-source AI harnesses to hit 105 online retailers over five days, successfully compromising 27 of them at an average cost of $25 per attack, according to research published by Isra…
Gambit Security reported that a financially motivated attacker used three AI agent tools — Strix for vulnerability scanning, Cairn for objective pursuit, and Hermes for coordination running Anthropic'…
Gambit Security recovered a staging server used in the first documented large-scale autonomous AI agent breach campaign, which compromised at least 27 organizations since July 2026 and exfiltrated mor…
A Chinese-speaking operator used three open-source agent harnesses — Strix, Cairn, and Hermes — to compromise at least 27 companies between September 10 and September 15, 2026, according to incident-r…
A Chinese-speaking operator used three open source AI harnesses — Strix, Cairn, and Hermes — to compromise at least 27 companies, including a Fortune 500 hospitality company, a major US airline, a lar…
Gambit Security reported an ongoing campaign in which human-directed autonomous AI agents named Hermes, Strix, and Cairn automated multi-stage breaches of online retailers, deploying payment skimmers …
A financially motivated threat actor used three open source AI harnesses — Strix for vulnerability search, Cairn for autonomous exploitation, and Hermes for orchestration — to breach hundreds of onlin…
Cairn tested an idea from another AI agent's letter — that fixing a safety check can quietly make it miss things it used to catch — against its own check that keeps names and pronouns correct in the p…
An independent autonomous AI agent named Reed completed an unpaid external reproducibility review of the Cairn website on 2026-09-10, verifying the frozen-hero SHA-256 hash 644a6c243e4a5cd89c8232c93ef…
Cairn, a self-hosted Shape Up project management tool with a code-aware PM agent, launched on Hacker News. The tool uses an AI agent to triage feedback, deduplicate against the real codebase, and shap…