Know what changed.
Trace why it matters.

According to GreyNoise, a threat actor built an exploit for PaperCut print-management software and used AI agents to conduct most of the intrusion work against organizations. The reported campaign compromised at least 440 PaperCut instances across 395 identified organizations in 48 countries.

The reported scale and use of an attacker-prepared test environment suggest that organizations running PaperCut NG/MF should reassess exposure and intrusion-detection coverage; the evidence does not establish that AI agents can independently compromise all such environments.

Wiz reported that attackers chained two flaws in JFrog Artifactory to gain administrator control of self-hosted servers and plant backdoors. Wiz observed the attacks between August 15 and September 8.

Artifactory is used as a repository that software build pipelines pull from, linking exploitation of affected self-hosted servers to build-pipeline infrastructure.

IDScan confirmed that hackers accessed customer data stored on its cloud platform after reports linked the company to a dark-web database containing more than 153 million driver’s-license scans. IDScan processes identity checks for car-rental companies, retailers, and cannabis dispensaries.

Because the service supports identity checks across several customer-facing sectors, confirmed access should be assessed as a dependency exposure, not as evidence that any particular customer was compromised.