Chinese-speaking hackers used open-source AI pentest tool to breach 10 organizations
Palo Alto Networks Unit 42 says attackers paired the open-source AI pentesting framework Cairn with Chinese models GLM and DeepSeek to run 25 operations against at least 19 organizations in August and September 2026. They gained access or took data at 10 targets, mostly in semiconductors, advanced manufacturing and defense, often after giving little more than a domain name and a one-line goal.
Autonomous AI attack tools are now being used in real campaigns, so defenders must assume attacks can run at machine speed with little human effort.
aii.news picks and summarizes stories from trusted news sources with the help of AI. Every story links to the original reporting. How we work.
Keep reading
-
Study finds ChatGPT, Gemini and Perplexity sometimes send shoppers to fake retail sites
IP protection firm Podqi asked the chatbots shopping questions about 151 brands and found they could point users to imposter and other risky websites. The test ran over two periods starting in September.
Why it mattersIf you use chatbots to find where to buy things, double-check the website address before entering payment details.
-
186 lookalike AI tool domains push ClickFix lures, browser malware and search hijackers
Researchers at Island found lookalike domains posing as popular AI tools that trick visitors into fake verification steps, install browser-hijacking malware or add extensions that hijack searches. The technique has been named TypoPrompting.
Why it mattersTyping an AI tool's address wrong can lead to malware, so bookmark the real sites and be wary of any page asking you to run commands.
-
United Airlines blocks customers from using AI agents to book and manage flights
United says it will not let personal AI assistants book tickets or manage reservations, warning that sharing account credentials with third-party agents can expose sensitive data and cause unintended purchases. It also cited federal rules on information airlines must give passengers.
Why it mattersCompanies are starting to restrict AI agents on their accounts, which may limit what consumer agents can do for you online.
-
OpenAI launches Daybreak security tools that use AI agents to pentest apps and prepare fixes
OpenAI introduced Daybreak Red Team, which uses coordinated AI agents to test web applications for weaknesses and is offered through early access. It also launched Defense Factory, which investigates security findings and prepares patches, linking vulnerability discovery with fixing and retesting.
Why it mattersSecurity teams may soon be able to hand both finding and patching of app flaws to AI agents, which could speed up fixes but needs careful human review.
-
UK privacy regulator receives a record number of reported cyber incidents this year
British organisations have reported more cyber incidents to the UK data protection regulator this year than ever before. Security firms blame data extortion and artificial intelligence for the surge in attacks.
Why it mattersCompanies handling personal data in the UK should expect more attacks and more regulatory attention, and should check their incident response plans.
