# Exposed Cairn Panels Reveal Hundreds of Secrets, 11% Verified Valid By Simon Yoon Canonical URL: https://www.tokenpost.com/news/technology/35155 Published: 2026-10-20T00:41:46.000Z Updated: 2026-10-20T00:41:46.000Z Section: Technology > More than 20 panels appeared tied to malicious activity, including a 14-panel cluster with more than 1,100 attack projects. A scan of publicly accessible Cairn control panels found hundreds of secrets, including credentials and API keys, with 11% verified as valid, exposing potentially usable access details tied to website attacks. More than 20 panels appeared linked to malicious activity. They held target information, discovered weaknesses and records of what AI agents had tried. The findings could put websites listed in the panels at risk even when an attempted attack did not succeed. The panels also included controls for starting projects and redirecting agents to different targets. Whether an unauthorized user could operate those controls was not tested. The findings add a new security dimension to [the AI-agent campaign that attempted more than 1,200 websites and gained access to sites at more than 100 companies](). The most active Chinese-speaking group spanned 14 panels and recorded more than 1,100 attack projects targeting mainly e-commerce and payment systems. The project count is separate from the number of websites the campaign attempted. A separate cluster contained instructions to steal credit card information and cryptocurrency, and used Cairn to move funds between crypto wallets. NorForge is working to notify affected websites and have the offending panels taken down. ## Links in this article - [the AI-agent campaign that attempted more than 1,200 websites and gained access to sites at more than 100 companies](https://www.tokenpost.com/news/technology/34850)