> TritonInfoSec News
Home / Sep 11, 2026 / Story
0
#2 The Hacker News general September 10, 2026 at 11:41 UTC

PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances

By [email protected] (The Hacker News)

AI Summary

A suspected Russian-speaking threat actor deployed hundreds of AI agents from IP address 45.142.193[.]132 to develop and launch exploits against PaperCut NG/MF servers, successfully compromising over 440 instances according to independent reports from Blackpoint Cyber and GreyNoise. The campaign demonstrates AI's ability to compress exploit development timelines from weeks to hours, representing a structural shift in attacker capability. Organizations running PaperCut NG/MF should verify patch status immediately and treat unpatched instances as actively targeted.

Read full article → https://thehackernews.com/2026/09/papercut-attacke…

Relevance score: 87.0/100

# More from September 11

  1. 1
    Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers BleepingComputer
  2. 3
    New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws BleepingComputer
  3. 4
    New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender SecurityWeek
  4. 5
    Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE The Hacker News
  5. 6
    CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline The Hacker News
  6. 7
    AI lets small actors run state-level hacking campaigns, Anthropic report finds CyberScoop
  7. 8
    IDScan confirms breach tied to 153 million stolen driver’s licenses BleepingComputer
  8. 9
    Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6 The Hacker News
  9. 10
    US says Chinese firms extracted billions of tokens from frontier AI models BleepingComputer