Separating AI hype from reality.

Palo Alto Networks

November 13, 2026

Chinese-Linked Attackers Use Autonomous AI System 'Cairn' to Breach 10 of 19 Targeted Organizations

Palo Alto Networks' Unit 42 has documented a Chinese-speaking threat actor using an open-source AI penetration testing framework called Cairn to conduct 25 autonomous intrusion operations against at least 19 organizations in August and September 2026. The attackers gained…