Forensic Summary
Two actively exploited PaperCut vulnerabilities (CVE-2026-81578 and CVE-2026-82078) are being weaponised by a suspected Russian-speaking threat actor using hundreds of AI agents powered by OpenAI Codex and a DeepSeek model to conduct large-scale authentication bypass and code execution attacks. The campaign has compromised at least 395 organisations across 48 countries, with a heavy focus on the U.S. education sector. PaperCut has released full maintenance releases superseding earlier emergency patches, and immediate upgrade is advised.
Read the full technical deep-dive on Grid the Grey: https://gridthegrey.com/posts/cve-2026-81578-papercut-exploited-by-ai-agents-at-scale/
Top comments (0)