Russian-speaking threat actor

AI-Powered Campaign Exploits PaperCut Vulnerabilities, Affecting 395 Organizations

A threat actor, likely Russian-speaking, used hundreds of AI agents to develop and launch a global exploitation campaign targeting vulnerable PaperCut NG/MF servers, compromising 395 organizations worldwide. The campaign was reported by BleepingComputer on September 10, 2026. Specific CVE identifiers were not provided in the initial reporting, and the use of AI agents and actor attribution remain unconfirmed.