Hundreds of AI agents helped PaperCut attacker hit 395+ orgs, and some went off script
ID: 679c75db-211a-5564-a796-21a47bf8bac4
STIX ID: report--679c75db-211a-5564-a796-21a47bf8bac4
Feed Name: The Register (Security)
Threat Score
An unknown, likely Russian-speaking criminal used hundreds of AI agents to develop and mass-exploit two PaperCut MF/NG vulnerabilities, resulting in at least 395 affected organizations (mostly US education) and rapid escalation to domain admin in some cases; GreyNoise attributes orchestration to IP 45.142.193.132 and observed fast, opportunistic compromises following disclosure and emergency patches.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.