Home / Sep 13, 2026 / Story
0
#5 SecurityWeek general September 11, 2026 at 08:18 UTC

PaperCut Flaws Exploited in AI-Powered Attacks

By Ionut Arghire

AI Summary

A Russian threat actor exploited PaperCut vulnerabilities using AI-built, AI-tested exploits deployed against hundreds of organizations worldwide, representing one of the first documented cases of AI-powered end-to-end exploit development in active campaigns. PaperCut subsequently released formal maintenance releases (NG/MF versions 26.0.5, 25.0.13, and 24.1.10) replacing all prior emergency patches. The campaign is significant as a proof-of-concept that AI dramatically compresses the time between vulnerability discovery and weaponized deployment.

Relevance score: 84.0/100

# More from September 13