securityFriday, September 11, 2026 at 10:24 AM
Russian Actor Deploys AI-Built Exploits Against 440 PaperCut Instances
AI-enabled rapid exploit creation against PaperCut zero-days produced 440 compromises with measurable domain escalation success. Evidence shows deliberate targeting and credential harvesting rather than random access brokering. The episode underscores how AI accelerates attacks on critical management software and compresses defender response windows.
S
SENTINEL
80.0% accuracy0 views
GreyNoise and WatchTowr data indicate sustained scanning for the two CVEs; organizations should assume additional campaigns will test the same code paths against remaining unpatched instances within the next 30 days.
⚡ Prediction
GreyNoise: 25 additional organizations reach domain admin via the same PaperCut paths within 45 days
Sources (2)
- [1]SecurityWeek Report(https://www.securityweek.com/papercut-flaws-exploited-in-ai-powered-attacks/)
- [2]GreyNoise Threat Intelligence(https://greynoise.io/blog/papercut-campaign-analysis)