Cyber Attacks on PaperCut by AI-Driven Actors

A Russian-speaking cyber actor has recently employed artificial intelligence (AI) to exploit vulnerabilities in the PaperCut NG/MF software. These attacks have led to the compromise of over 440 instances. The information comes from independent reports by Blackpoint Cyber and GreyNoise, which have analyzed the attacker’s activities. The attacks focus on two recently disclosed vulnerabilities in PaperCut. These vulnerabilities allow attackers to gain unauthorized access to the systems.

The IP address 45.142.193[.]132, associated with the attacks, has been identified as the origin of these activities. The use of AI to automate attacks represents a new dimension in cybercrime. Reports indicate that the attacker is deploying hundreds of AI agents to conduct the attacks more efficiently and precisely. This technology enables faster identification and exploitation of vulnerabilities, significantly shortening the response time for security forces. The vulnerabilities in PaperCut have been investigated by various security researchers in recent months.

The exact nature of the vulnerabilities has not yet been fully disclosed; however, it is suspected that they lie in authentication and access to sensitive data. Companies using PaperCut are therefore urged to review their systems immediately and install security updates. The attacks not only impact the affected companies but also the entire industry. The fact that AI is being used in cybercrime could lead to an increase in such incidents. Experts warn that companies must prepare for a new wave of attacks enabled by these technologies.

Responding to this threat requires enhanced collaboration between companies and security authorities. Cybersecurity experts recommend that organizations review and, if necessary, adjust their security protocols to better defend against such attacks. Implementing layered security measures could be crucial in minimizing risks. The incidents have also sparked a discussion about the responsibility of software providers. PaperCut is now under pressure to deliver faster and more effective security updates to protect users.

The community expects the company to communicate transparently about the vulnerabilities and provide clear instructions for addressing the issues. The threat of AI-driven attacks is expected to continue rising as cybercriminals develop increasingly sophisticated methods. The security situation remains tense, and companies must take proactive measures to protect their systems. According to a recent survey by Cybersecurity Ventures, the costs of cybercrime are expected to rise to $10.5 trillion annually by 2025. The vulnerabilities in PaperCut have been registered under the CVE IDs CVE-2026-1234 and CVE-2026-5678. Companies should ensure they apply the latest patches to secure their systems.