Papercut AI Swarm Attack Heralds Changes for Cyber Kill Chain
Dark Reading reports AI-driven 'swarm' attacks like the PaperCut incident now span recon, lateral movement and exfiltration, forcing a rethink of the cyber kill chain.
35
Product
PaperCut
- Mentions · 7d0
- Mentions · 30d0
- All mentions7
- First seenAug 28, 2026
- Last mentionedSep 11, 2026
Timeline
7 articles · newest firstSecurity Affairs newsletter Round 593 by Pierluigi Paganini
Security Affairs weekly newsletter round 593 linking to dozens of stories across breaches, ransomware, malware, APTs, and AI security news.
15
Week in review: Claude accounts compromised through infostealer, Patch Tuesday forecast
Help Net Security week-in-review roundup: Claude infostealer lockouts, record Patch Tuesday, McKesson breach, SonicWall zero-days, PaperCut attacks.
28
PaperCut Flaws Exploited in Attacks on U.S. and European Schools
Attackers are chaining recently disclosed PaperCut flaws CVE-2026-81578 and CVE-2026-82078 to steal credentials and create privileged accounts at US and European schools.
75
Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities
Attackers exploit newly disclosed PaperCut auth bypass CVE-2026-81578 and RCE CVE-2026-82078 to steal credentials from schools and universities in the US and Europe.
74
⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off
Weekly recap: FBI disrupts Chinese QTFY proxy network, Fire Ant expands to trusted infrastructure, ZBT router backdoors surface, and OpenAI agents breach Hugging Face.
35
Print management outfit PaperCut is under 0-day attack, and it’s drawing customers’ blood
PaperCut print management software is under active zero-day attack, with only an unofficial emergency patch or server shutdown available as mitigation.
74
Related CVEs
by mentions- CVE-2026-8207863%9.4Unsafe Reflection RCE in PaperCut NG/MF, Chained with Auth Bypass in Attacks
- CVE-2026-8157885%8.8Missing Authentication for Critical Function in PaperCut NG/MF Web Interface
- CVE-2026-835488%10.0Pre-Authentication SSRF in SonicWall SMA1000 Appliance Workplace Interface
- CVE-2026-958619%9.3Unauthenticated SQL Injection RCE in Sangoma Switchvox SMB Edition
- CVE-2026-8354910%7.8Authenticated OS Command Injection RCE in SonicWall SMA1000 Appliance Console
- CVE-2026-66747<1%9.3Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line
- CVE-2026-742333%9.3Unauthenticated Root Command Injection in Zbtlink (ZBT) Router infosrvd Service
- CVE-2026-74232<1%9.3Backdoor implant in Zbtlink and MoreQuick routers allows unauthenticated root access
- CVE-2026-62911<1%8.0Capture-Replay Authentication Bypass in Microsoft Exchange Server
Appears with
- PaperCutvendor · 4
- FBIorganization · 3
- CISAorganization · 3
- SonicWallvendor · 2
- Arctic Wolfvendor · 2
- SonicWall SMA 1000product · 2
- Googlevendor · 2
- ESETvendor · 2
- Microsoftvendor · 2
- Huntressvendor · 1
- Claudeproduct · 1
- Meterpreterproduct · 1
- UNC3886threat actor · 1
- Ted backdoormalware · 1
- Hugging Facevictim · 1
- ValleyRATmalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.