AI Agents Drive Global PaperCut NG/MF Exploitation Campaign
Original image source: bleepstatic.com A threat actor, presumably Russian-speaking, has launched an unprecedented global exploitation campaign, using hundreds of artificial intelligence (AI) agents to compromise vulnerable PaperCut NG/MF servers. The campaign, detected by threat intelligence company GreyNoise, highlights the speed and scale that AI tools can give cyber attackers. Origin and Methodology of the Attack The campaign began on August 31, combining AI models such as OpenAI’s Codex and DeepSeek with commercial offensive tools. The AI agents were programmed to build, test and refine exploits for the CVE-2026-81578 and CVE-2026-82078 vulnerabilities, both affecting the PaperCut software and listed as actively exploited earlier this month. Additionally, AI agents generated target lists using the Netlas internet scanning platform. ...