aiqbench analysis
The reported campaign is a concrete case of AI agents lowering the effort needed to find and exploit vulnerabilities at scale, but the access still depended on unpatched, internet-exposed PaperCut servers. Readers should note that the figures come from GreyNoise and Hunt.io's observations, not independent verification of every compromise. The practical lesson is that patching and limiting exposure remain the main defenses, while AI-assisted attack workflows warrant closer monitoring.
Hackers Use Codex and DeepSeek AI Agents to Breach 440 PaperCut Servers Worldwide
A cybercrime campaign used hundreds of AI agents to target internet-facing PaperCut NG and MF print-management servers, compromising at least 440 instances linked to 395 organizations in 48 countries, according to GreyNoise. The operation paired OpenAI’s Codex coding-agent harness with a DeepSeek model and common security tools, allowing the operator to develop and test exploits […] The post Hackers Use Codex and DeepSeek AI Agents to Breach 440 PaperCut Servers Worldwide appeared first on Cyber Security News.
A cybercrime campaign used hundreds of AI agents to target internet-facing PaperCut NG and MF print-management servers, compromising at least 440 instances linked to 395 organizations in 48 countries, according to GreyNoise. The operation paired OpenAI’s Codex coding-agent harness with a DeepSeek model and common security tools, allowing the operator to develop and test exploits before running them against exposed systems at scale. The incident shows how AI agents can help an operator move quickly through a complex intrusion, but the breach still depended on vulnerable or poorly protected systems. Researchers found that…
Excerpt shown under the publisher's RSS terms · 93 words · full text and figures are on the publisher's site
Related coverage
Hackers Use Hundreds of AI Agents to Exploit PaperCut Flaws and Compromise 440 Servers Worldwide
Cybersecurity News · Sep 9, 2026
[AINews] Reflection Beam - 501B-A23B American Open Model
Latent Space · Oct 6, 2026
Hackers Turn Claude, Qwen and DeepSeek Into AI Agents for Real-World Cyberattacks
Cybersecurity News · Sep 4, 2026
Hackers Using Claude and OpenAI’s Codex for Exploitation, and Data Exfiltration Activities
Cybersecurity News · Jun 17, 2026