Cybersecurity firm NorForge identified over 20 malicious instances of the open-source AI engine Cairn exposed publicly on the internet around October 2, 2026.

Autonomous systems that use large language models to plan, reason, and take actions — including browsing the web, writing code, calling APIs, and completing multi-step tasks with minimal human intervention.