https://www.greynoise.io/blog/ai-orchestrated-campaign-against-papercut-ng-mf
AI-driven PaperCut exploitation hit 395 organizations GreyNoise says a likely Russian-speaking threat actor used hundreds of AI agents, combining OpenAI Codex, DeepSeek, and commodity tooling, to exploit PaperCut NG/MF flaws CVE-2026-81578 and CVE-2026-82078. The campaign compromised 440 instances tied to 395 organizations in 48 countries, with education accounting for roughly half of victims.