gcdRadar
tags/Threat actors and campaigns

cairn

1 live · 3 on record · last incident 2 days ago

Dec ’25records per month, by first reportNov ’26

Live1

  1. live
    Cairn Attackers breached 10 organizations using the open‑source AI pentest framework Cairn

    Breaches & attacks · Real loss · since Aug 2026 (approx.)

    Attackers used the open‑source AI pentest framework Cairn to breach ten organizations, gaining unauthorized access and exfiltrating data. The campaign spanned August and September 2026 and targeted semiconductor, advanced‑manufacturing, and defense sectors.

    Do:Investigate the breach, reset compromised accounts, and strengthen monitoring for AI‑driven intrusion attempts.

    AI

Earlier2

  1. closed
    Cairn AI Platform Cairn Abused by Threat Actors to Compromise Over 100 Organizations

    Breaches & attacks · Exploited · since 20 Oct 2026

    AI
  2. closed
    Cairn Hackers Abuse AI Penetration Testing Tool Cairn for Automated Attack Campaign

    Breaches & attacks · Exploited · since 20 Oct 2026

    AI