FlagThis — Daily Cybersecurity Intelligence Briefing

A sophisticated, highly automated cyber campaign is targeting PaperCut NG and MF print management software through a distributed fleet of hundreds of AI-driven agents. Attributed to a suspected Russian-speaking threat actor, the campaign utilizes artificial intelligence to autonomously generate and execute exploits against recently disclosed vulnerabilities. This orchestration enables unprecedented operational speed, facilitating large-scale reconnaissance and lateral movement that allows attackers to escalate privileges to Domain Admin in under five minutes. To date, the campaign has successfully compromised 440 servers across 48 countries, demonstrating a significant leap in automated, high-velocity exploitation capabilities.