Cairn: Open windows into AI-driven cyber operations

Posted by ragu4u 3 days ago

Comments

Comment by scorxn 2 days ago

The norforge report sounds like they were targeting magento (e-commerce) sites to steal some $. Darn, was hoping they were trying to swipe DRM keys or something.

Comment by bossyTeacher 2 days ago

Weird. Surely, Wordpress sites are easier targets? Why Magento I wonder? Isn't Shopify more popular?

Comment by scorxn 2 days ago

Magento is ridiculously complex, open-source, and often self-maintained. It's probably fairly easy to exploit, especially for outdated deployments. And (vs. Wordpress) has payment info to intercept.

Comment by jsbisviewtiful 2 days ago

> John Deere

One of those companies that clearly deserved it.

Comment by _neil 2 days ago

Cairn is one of those names that comes up regularly if you ask an LLM to generate project names. Similar to Loom.

https://github.com/search?q=cairn+in%3Aname+created%3A%3E202...

Comment by gavinray 2 days ago

  > "... for the harnesses we have seen in these campaigns, average success rate is hovering around 10%"

A 10% success rate is absurd.

Comment by soletta 2 days ago

Absurdly high, or absurdly low?

Comment by 2 days ago

Comment by VCFundedGenYer 2 days ago

Shame on SharkNinja in particular - they have no MFA for accounts.

Comment by catchnear4321 2 days ago

it’s always amusing to notice when the llm likely influenced the name.