PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances

Cybersecurity · September 11, 2026

Cybersecurity·thehackernews.com

A suspected Russian-speaking threat actor has automated the exploitation of two recently disclosed PaperCut NG/MF vulnerabilities using a large fleet of AI agents, breaching more than 440 print-management servers. Independent research from Blackpoint Cyber and GreyNoise traces the campaign to a single IP address tied to earlier malicious activity. The incident highlights how attackers are increasingly using AI tooling to scale exploitation campaigns that would otherwise require far more manual effort.

// source: thehackernews.com ↗

Back to Blog