Magento is ridiculously complex, open-source, and often self-maintained. It&#x27;s probably fairly easy to exploit, especially for outdated deployments. And (vs. Wordpress) has payment info to intercept.

Weird. Surely, Wordpress sites are easier targets? Why Magento I wonder? Isn&#x27;t Shopify more popular?

The norforge report sounds like they were targeting magento (e-commerce) sites to steal some $. Darn, was hoping they were trying to swipe DRM keys or something.

Cairn is one of those names that comes up regularly if you ask an LLM to generate project names. Similar to Loom.<p><a href="https:&#x2F;&#x2F;github.com&#x2F;search?q=cairn+in%3Aname+created%3A%3E2023-01-01&amp;type=repositories" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;search?q=cairn+in%3Aname+created%3A%3E202...</a>

&gt; John Deere<p>One of those companies that clearly deserved it.

<p><pre><code>  &gt; &quot;... for the harnesses we have seen in these campaigns, average success rate is hovering around 10%&quot;
</code></pre>
A 10% success rate is absurd.

it’s always amusing to notice when the llm likely influenced the name.

<a href="https://www.reuters.com/legal/government/how-one-hacker-used-ai-agents-few-thousand-dollars-break-into-scores-sites-2026-10-19/" rel="nofollow">https://www.reuters.com/legal/government/how-one-hacker-used...</a><p><a href="https://www.theverge.com/ai-artificial-intelligence/1013643/ai-agents-hack-john-deere-shark-ninja-cummins" rel="nofollow">https://www.theverge.com/ai-artificial-intelligence/1013643/...</a>