Netlas

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenSep 10, 2026
Last mentionedSep 11, 2026

Timeline

3 articles · newest first

AI agents exploited PaperCut flaws to breach 395 organizations

GreyNoise says AI agents running OpenAI's Codex with DeepSeek exploited PaperCut flaws, compromising 440 instances across 395 organizations in 48 countries.

Help Net SecuritySep 11, 10:05 UTC · Sep 11, 2026Exploit / PoCExploitedCVE-2026-81578 CVE-2026-820783 · 1 read

AI-powered attack exploited PaperCut flaws to hack 395 organizations

AI-driven campaign exploited PaperCut flaws CVE-2026-81578 and CVE-2026-82078, compromising 440 servers at 395 organizations in 48 countries.

BleepingComputerSep 10, 15:55 UTC · Sep 10, 2026Exploit / PoCExploitedCVE-2026-81578 CVE-2026-82078 CVE-2021-42278+13 · 2 reads

Hackers Deploy Hundreds of AI Agents to Compromise 440 PaperCut Servers

AI-agent campaign exploited PaperCut CVE-2026-81578 and CVE-2026-82078, compromising 440 servers at 395 organizations and reaching Domain Admin in 12.

GBHackersSep 10, 05:20 UTC · Sep 10, 2026Exploit / PoCExploitedCVE-2026-81578 CVE-2026-82078 CVE-2021-42278+12 · 1 read

Related CVEs

by mentions

CVE-2026-8207861%9.4
Unsafe Reflection RCE in PaperCut NG/MF, Chained with Auth Bypass in Attacks
published Aug 28, 2026PaperCut NGKEV
CVE-2026-8157884%8.8
Missing Authentication for Critical Function in PaperCut NG/MF Web Interface
published Aug 28, 2026PaperCut MFKEV
CVE-2021-4228777%7.5
Privilege Escalation in Microsoft Active Directory Domain Services
published Nov 10, 2021microsoft windows server 2004KEVRansomware
CVE-2021-4227873%7.5
Privilege Escalation via sAMAccountName Spoofing in Microsoft Active Directory
published Nov 10, 2021microsoft Windows Server 2004 (AD DS)KEVRansomware

Appears with

PaperCutvendor · 3
GreyNoiseorganization · 3
DeepSeekai model · 3
DeepSeekvendor · 3
OpenAIvendor · 3
PaperCut MFproduct · 2
GreyNoisevendor · 2
PaperCut NGproduct · 2
OpenAI Codexproduct · 1
Cloudflarevendor · 1
save_hives.exemalware · 1
Active Directoryproduct · 1
Ligoloproduct · 1
OpenAIorganization · 1
PaperCutorganization · 1
lsa_read.exemalware · 1

Entities are extracted by the model from each article. First seen Sep 10, 2026, last mentioned Sep 11, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.