Beginning September 25, 2026, a Chinese-speaking hacker deployed AI agents using the open-source tool Cairn to attempt breaches on over 1,200 commercial websites across the United States, Canada, Australia, and Japan.