Cairn: Open windows into AI-driven cyber operations

NorForge's investigation discovered over 20 exposed Cairn panels—AI-powered hacking systems that threat actors use to autonomously identify targets, find vulnerabilities, and establish persistent access to compromised systems. The exposed control interfaces revealed detailed information about malicious cyber operations, including target selection, exploitation techniques, and stolen credentials, while also potentially compromising legitimate red team operations. The researchers found these panels were inadequately secured and left accessible on the open internet, with new panels coming online regularly from the same threat actors.