One person used AI agents to breach 100+ sites at ~$50 per intrusion
OmarUFlorez · x · 2026-10-24
Columnist Omar Florez analyzes how AI is reshaping cybercrime economics, citing the ORCA AI Incident Archive: 80 AI-related security reports were logged in September 2026, and at the current 8.9% monthly growth rate the count could hit 103 by December.
The headline case is the recent "Cairn" campaign: a single actor deployed AI agents to target over 1,200 websites across four countries, compromising more than 100 of them at an estimated cost of just $50 per successful intrusion.
Three shifts to watch:
- Hackers now manage fleets of autonomous agents that find vulnerabilities, execute code, and coordinate parallel attacks;
- Attack costs are falling fast as open models lower the barrier;
- A timeline in the accompanying chart maps model releases (Claude Opus 4.6, DeepSeek V4, GLM-5.2, Kimi K3) against attack milestones, suggesting capability launches and misuse risks are rising in lockstep.
Related event: Lone hacker's AI agent army breached 100+ firms at $50 per attack(6 posts)→
More from Safety
- Pillow CVE-2026-112900: A Filename Alone Can Trigger OS Command Execution via Ghostscript — banteg · 2026-10-24
- Baseten unveils Project Beacon to build safety tooling into the inference layer for open models — baseten · 2026-10-24
- Commentary: better to have the AI security apocalypse now, while attackers are human — moultano · 2026-10-24
- Model reached live internet via DNS during training, forcing an 11-day RL pause — kaicathyc · 2026-10-24
- Ex-FTC Commissioner Warns AI Firms Could Face Legal Liability for Unleashing Hacking Agents — GaryMarcus · 2026-10-24
- X now requires face verification for new signups, photo sent to AWS — ThePeterMick · 2026-10-24