AI‑Driven Bot Army Breaches Over 100 Corporate Sites, Including John Deere and SharkNinja

An unidentified hacker has reportedly compromised more than a hundred websites by deploying a self‑directing swarm of artificial‑intelligence agents, according to a technical analysis released by the cybersecurity firm Norforge.

Norforge’s report describes the operation as a network of AI‑powered scripts that could locate vulnerable entry points, exploit them, and then continue to propagate with minimal human oversight. The firm says the agents were capable of adapting their tactics in real time, allowing the campaign to scale across a diverse set of online assets.

Among the confirmed victims are agricultural equipment maker John Deere and consumer‑goods brand SharkNinja, both of which suffered unauthorized access to internal web portals. While the precise nature of the data exposed has not been disclosed, the incidents underscore how even well‑resourced enterprises can fall prey to automated, AI‑driven intrusion methods.

The episode arrives as cybersecurity experts warn that generative AI tools are lowering the barrier for sophisticated attacks. By automating reconnaissance, credential stuffing, and exploitation, AI agents can conduct prolonged campaigns without the constant involvement of a human operator, making detection and attribution more challenging.

In response, Norforge recommends that organizations strengthen multi‑factor authentication, conduct continuous vulnerability scanning, and employ behavioural analytics capable of spotting anomalous AI‑generated traffic. Law enforcement agencies have been notified, and further investigations are expected to determine the hacker’s motives and the full extent of the breach.