
NorForge findings, reported by Reuters, put the cost near $50 per intrusion; the extent of data theft is unknown
WASHINGTON — A Chinese-speaking hacker handed most of the work of breaking into company websites to AI agents, according to a Reuters exclusive published Oct. 19 and based on research by the security firm NorForge. Researcher Snorre Fagerland found the operation while scanning for exposed installations of Cairn, an open-source agent platform. He says the agents tried more than 1,200 mostly e-commerce sites in the U.S., Canada, Australia and Japan from Sept. 25 and got into more than 100. A successful break-in took about 23 hours. The operator's instructions ran under 100 Chinese characters. Token costs were roughly $5,000, or about $50 per success. Worker names suggested Claude Code running a DeepSeek model, but NorForge did not confirm the full setup. Deere said it found no sign that sensitive data was accessed. SharkNinja said the affected site was a standalone product-support page. Cummins is investigating a third-party vendor's site. Reuters could not determine how much data, if any, was taken.
Why it mattersIf one person can run intrusions at this scale for a few thousand dollars, defenders can no longer assume attacks are limited by human labor.

Local order came minutes before the oversight board's second meeting, four days after a federal judge cleared the way
Non-binding referendum asks whether to stay in Canada or start a legal path to a binding secession vote
Prosecutors cite WhatsApp contacts with a royal family member and Saudi-paid flights for his family; the Saudi consulate's bail offer was rejected
Wall Street's Monday bounce meets a bond selloff and renewed bets on Fed hikes ahead of next week's FOMC.



Founding of the Front for the Refoundation of the Nation raises doubts about peace prospects

Higher domestic prices behind tariffs lift third-quarter profit; company flags 2027 EBITDA above $4 billion

Order also reaches third-party tools built on the Chinese lab's models; it does not cover private or consumer use

Ruling affirms award to service station mechanic who developed leukemia; Second Circuit also keeps Tylenol suits alive

Judge Thomas Parker voices concern about viewpoint discrimination and how the six were singled out

Vatican keeps him in Rome this week; pathology on tumor and lymph nodes will decide on further treatment

Museum shuts for a day on the anniversary of its jewel heist; fair promises extra security

No backup plan for UFC 333 in Abu Dhabi, and Saudi and Qatar dates are also said to be going ahead

Rule that reclassifies 10 kinds of disruption as outside airline control was due Oct. 19; airlines requested the delay