PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances

This is what AI-scaled offense looks like. One actor ran hundreds of AI agents to research, exploit and post-exploit PaperCut servers: 440+ instances across 395 organizations in 48 countries. In one case it took about seven minutes to get from initial access to domain admin. The agents didn’t need new bugs. They cut the human effort per target, so every exposed and unpatched server gets hit.