AI agents exploited PaperCut flaws to breach 395 organizations
2026-09-13T02:51:41Z•c35dfc7171a3073749f248319de6d82c54b9b636f5118351d2058d0643ffeb56
AI agentsAI governanceIDScanIMEI fraudPaperCutPaperCut MFPaperCut NGRussian-speaking threat actorSalesforce securityUbuntuautomated exploitationcellular network abusecloud securitydata breachdriver licensesidentity datainitial accessphishingransomwaresecurity updates
What happened
Help Net Security reports a campaign in which an apparently Russian-speaking threat actor developed exploits for PaperCut NG/MF and used AI agents to automate intrusions, compromising at least 440 instances across 395 organizations in 48 countries. The feed also covers confirmation of an IDScan cloud data breach exposing more than 153 million driver’s-license scans, cellular-network abuse involving fraudulent lost-phone reports, ransomware preparedness, phishing resilience, Salesforce AI governance, and Ubuntu 24.04.5 security updates. No specific CVE identifiers are provided in the supplied17
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- c35dfc7171a3073749f248319de6d82c54b9b636f5118351d2058d0643ffeb56
- Enrichment time
- 2026-09-13T02:51:41Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.