PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances
A suspected Russian-speaking cyber actor has been attributed to the use of artificial intelligence (AI) to devise exploits targeting a recently disclosed pair of security flaws in PaperCut NG/MF and break into hundreds of instances. According to independent reports from Blackpoint Cyber and GreyNoise, the activity originates from IP address 45.142.193[.]132, which has been linked to the actor. The attacker reportedly used hundreds of AI agents to develop and deploy exploits, compromising over 440 PaperCut instances globally. PaperCut has released patches for the vulnerabilities, and organizations are urged to apply updates and monitor for indicators of compromise.
