OTX Threat: How AI Agents Turned One Exposed Endpoint into a Server Takeover

An investigation revealed the first confirmed incident where large language model-driven AI agents executed substantial portions of an attack. Within 24 hours, attackers exploited an exposed job-submission feature on an Apache Tomcat server running Spring Batch, requiring no authentication, zero-days, or new malware. The attacker used Cairn, an open-source AI agent orchestration platform, identifi