Attackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society Sectors

From August to September 2026, Chinese-speaking threat actors conducted 25 autonomous attack operations using the open-source AI penetration testing framework Cairn, enhanced with Chinese AI models Zhipu GLM and DeepSeek. The campaign, tracked as CL-STA-1238, targeted 19 organizations in the semiconductor, defense policy, and civil society sectors, achieving unauthorized access or data retrieval in 10 cases. Attackers used a customized fork of Cairn hosted on infrastructure in Hong Kong and the U.S., leveraging weak credentials, authentication bypasses, and exposed cloud APIs to compromise systems, exfiltrate data, and create persistent access. The activity is assessed with moderate confidence as a China-nexus intelligence collection effort based on language, tooling, and target selection.

AI-extracted · verify before operational use