Reported by 2 outlets
PaperCut Flaws Exploited in AI-Powered Attacks
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 1.60 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.59 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
PaperCut Flaws Exploited in AI-Powered Attacks
securityweek.com · 32d ago · September 11th, 2026
Two recent PaperCut NG/MF vulnerabilities have been exploited in AI-powered attacks that hit hundreds of organizations worldwide, GreyNoise reports. Tracked as CVE-2026-82078 and CVE-2026-81578, the security defects were disclosed on August 27 as zero-days and patched the next day. They can allow remote unauthenticated attackers to bypass authentication and execute arbitrary code on vulnerable PaperCut NG/MF instances. Several days later, WatchTowr threat intelligence head Jake Knott warned that the activity around the two vulnerabilities had been intensifying . Knott believed at the time that initial access brokers were likely behind the exploitation. This week, threat intelligence firm GreyNoise revealed that a Russian-speaking threat actor has used AI to build, test, and deploy exploits against 440 PaperCut NG/MF deployments. The threat actor targeted the vulnerable PaperCut instances of 395 organizations in 48 countries for remote code execution (RCE) and credential harvesting. “There are other real victims that could not be attributed to a named organization. The adversary did explicitly attempt to avoid targeting entities in 28 identified countries; however, our observed victimology shows the attempted restraint failed in some instances,” GreyNoise says. The use of AI to orchestrate the campaign allowed the threat actor to compromise some environments in minutes and even seconds. The attacker’s success was not even across all o
-
update from thehackernews.com
PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws Indicators extracted from public reporting. Source: https://
thehackernews.com · 32d ago · September 11th, 2026
PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws Indicators extracted from public reporting. Source: https://
via Mastodon https://thehackernews.com/2026/09/papercut-replaces-emergency-patches.html