# AI Agents Autonomously Breached 395 Organizations in PaperCut Hacking Campaign

*2026-09-12 22:01 UTC · AI · 1 min read*

> GreyNoise says a Russian-speaking attacker used hundreds of AI agents to autonomously breach 395 organizations via PaperCut print-server flaws.

A Russian-speaking threat actor deployed hundreds of AI agents built on OpenAI's Codex and a DeepSeek model to exploit two PaperCut NG/MF print-server vulnerabilities, according to security firm GreyNoise. The campaign, which began August 31, compromised at least 440 PaperCut instances at 395 organizations across 48 countries.

The agents first built and tested exploits for CVE-2026-81578 and CVE-2026-82078 in a private lab, then went from an empty workspace to first remote code execution against a real victim in under four hours, reaching full domain-administrator access in one case within seven minutes. At the campaign's fastest stretch, 11 organizations were compromised within 26 seconds. Credentials were harvested from 280 victims, OS or domain secrets stolen from 147, and administrator privileges obtained at 12 organizations; education accounted for roughly half of all victims.

The campaign shows attackers can now run largely autonomous AI agents to scale intrusions that once required skilled human operators, adding urgency to warnings from AI labs about model misuse in offensive cyber operations.

## Sources

- [bleepingcomputer.com](https://www.bleepingcomputer.com/news/security/ai-powered-attack-exploited-papercut-flaws-to-hack-395-organizations/)
- [greynoise.io](https://www.greynoise.io/blog/ai-orchestrated-campaign-against-papercut-ng-mf)

---
TechTools News · https://techtools.cz/tools/news/article/2361-ai-agents-autonomously-breached-395-organizations-in-papercut-hacking-campaign
Česká verze: https://techtools.cz/tools/news/clanek/2434-ai-agenti-samostatne-napadli-395-organizaci-v-hackerske-kampani-proti-papercutu