Hacker Uses AI Agents to Attack 1,200 Websites
An automated cyberattack campaign utilized AI to identify and exploit vulnerabilities across several international regions.
Updated on Oct. 20, 2026 in Cybersecurity
Live Poll
Do you trust that your personal information is secure against increasingly autonomous AI cyberattacks?
Beginning on September 25, 2026, an operation utilized AI agents to launch automated cyberattacks against more than 1,200 websites. The campaign successfully breached systems in the United States, Canada, Australia, and Japan.
Why it matters
The campaign demonstrates how low-cost, automated AI agents can perform sophisticated reconnaissance and exploitation at scale. Targeted organizations, including Deere, SharkNinja, and Cummins, have since implemented corrective measures to address the vulnerabilities.
The operation cost approximately $5,000 in AI tokens, averaging roughly $50 per successful breach. AI agents completed research and testing in about 23 hours using instructions under 100 characters in Chinese.
The players
Deere
Deere is a major manufacturer of agricultural, construction, and forestry machinery that was among the companies targeted in the breach.
SharkNinja
SharkNinja is a global product design and technology company known for houseware appliances that was identified as a target.
Cummins
Cummins is an international corporation that designs, manufactures, and distributes engines and power generation products.
The details
The hacker combined DeepSeek and Claude Code technologies to identify exposed control panels and exploit data processing flaws. These agents autonomously searched for vulnerabilities and adapted their tactics to breach security systems without human intervention.
Timeline
The AI-driven cyberattack campaign began on September 25, 2026.
The campaign reached over 1,200 attempted breaches by the week of October 12, 2026.
The Tech Race
This campaign illustrates a new, unauthorized use case for AI-driven development tools like Claude Code by demonstrating how they can be repurposed for autonomous vulnerability research. It signals a departure from traditional manual hacking toward automated, low-cost agentic threats.
Users may see companies increase security requirements for control panels and web administrative portals. This shift requires IT departments to prioritize automated threat detection to counter agents that operate faster than human oversight.
The takeaway
The low cost of this operation suggests that smaller actors can now execute large-scale digital incursions with limited resources. Businesses should review their infrastructure for exposed control panels to mitigate the risk of autonomous AI exploitation.
Further reading
For more information on current digital threats, visit the Cybersecurity section.
Live Poll
Do you trust that your personal information is secure against increasingly autonomous AI cyberattacks?
