PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances

PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances Ravie LakshmananSep 10, 2026Cyber Attack / Vulnerability A suspected Russian-speaking cyber actor has been attributed to the use of artificial intelligence (AI) to devise exploits targeting a recently disclosed pair of security flaws in PaperCut NG/MF and break into hundreds of instances. According to independent reports from Blackpoint Cyber and GreyNoise, the activity originates from "45.142.193[.]132," an IP address that has been linked to unauthorized port scanning and brute-force attack attempts in recent weeks. It's worth noting the same IP address was also flagged by Arctic Wolf in connection with the same activity last week. At its core, the opportunistic attacks exploit CVE-2026-81578 and CVE-2026-82078, a combination of an…