Attackers breached 10 organizations with an open-source AI pentest framework

Chinese-speaking threat actors repurposed the open-source AI penetration testing framework Cairn to automate attacks across 25 operations, successfully breaching 10 of 19 targeted organizations in just two months. The attackers focused on high-value targets in semiconductors, advanced manufacturing, defense, and human rights — sectors that represent both economic and geopolitical intelligence priorities. This incident demonstrates that freely available offensive security tooling dramatically lowers the barrier to entry for sophisticated, scalable attacks. Organizations in critical supply chains must assume that tools designed for defenders will be turned against them, and must harden their attack surfaces accordingly.