AI-powered attack exploited PaperCut flaws to hack 395 organizations
Summary
Attackers used AI agents to rapidly develop and deploy exploits against PaperCut NG/MF servers (software for managing print systems), compromising at least 395 organizations across 48 countries by targeting two security vulnerabilities (CVE-2026-81578 and CVE-2026-82078). The AI-driven campaign was exceptionally fast, achieving remote code execution (the ability to run commands on a target system) in under four hours and full administrator access in as little as seven minutes, demonstrating how AI enables attackers to move faster than defenders can respond.
Solution / Mitigation
System administrators are advised to apply PaperCut's emergency security updates addressing CVE-2026-81578 and CVE-2026-82078 immediately, and follow the vendor's recommendations in the PaperCut security bulletin.
Classification
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://www.bleepingcomputer.com/news/security/ai-powered-attack-exploited-papercut-flaws-to-hack-395-organizations/
First tracked: September 10, 2026 at 02:00 PM
Classified by LLM (prompt v3) · confidence: 85%