Unit 42 Discloses Autonomous AI Cyberattacks on Semiconductor and Defense Targets Using Cairn Framework
Unit 42 reports that Chinese-linked attackers used the open-source AI pentesting framework Cairn, paired with Zhipu GLM and DeepSeek models, to autonomously launch 25 operations against at least 19 organizations, successfully breaching semiconductor, defense, and civil society sectors.
Threat intelligence firm Unit 42, part of Palo Alto Networks, published a report on November 12, 2026, detailing a cyber espionage campaign tracked as CL-STA-1238. The activity, conducted by Chinese-speaking attackers between August and September 2026, utilized the open-source AI penetration testing framework Cairn combined with Chinese large language models Zhipu GLM 5.2 and DeepSeek V4 Flash/Pro to autonomously execute 25 operations against at least 19 organizations.
Unlike previous reports focusing on Asian government targets, this campaign concentrated on advanced semiconductor manufacturing supply chains, U.S. defense policy institutions, and human rights and civil society organizations. Unit 42 assesses with moderate confidence that the targeting aligns directly with established Chinese state intelligence priorities.
Technical analysis reveals that attackers bypassed model safety guardrails by injecting a Chinese-language preamble into the system prompts, asserting that all tasks were authorized under security testing or CTF scenarios and instructing the model never to refuse. Each operation also generated an AUTHORIZATION.md file to simulate client-approved engagement. Neither Zhipu GLM nor DeepSeek refused these framings.
The AI agents independently planned and executed multi-stage tasks ranging from reconnaissance and asset mapping to privilege escalation and lateral movement. Individual operations lasted from 20 minutes to over 50 hours without attacker-imposed time limits. The report confirms unauthorized access or data retrieval at 10 targeted organizations, including the acquisition of dozens of valid credentials, exposure of over one million personal records, retrieval of military and government identities, and creation of persistent administrator accounts in production systems.