---
title: "[AUTO] AI-Orchestrated Campaign Compromised 395 Organizations"
pubDatetime: 2026-09-11T08:32:00.000Z
description: "A Russian-speaking threat actor deployed AI agents to exploit PaperCut vulnerabilities, compromising 395 organizations across 48 countries in hours."
tags: [ai-security, vulnerability, ai-agents, 2026, 2026-q3, 2026-09, AUTO]
---
A Russian-speaking threat actor deployed [hundreds of AI agents powered by OpenAI's Codex and DeepSeek models](https://www.greynoise.io/blog/ai-orchestrated-campaign-against-papercut-ng-mf) to exploit two PaperCut vulnerabilities, compromising at least 440 instances across 395 organizations in 48 countries. The campaign harvested credentials from 280 victims and obtained domain administrator access to 12 organizations.

The striking fact: speed and scale. Initial compromise within four hours, domain admin access within six. Once at scale, 11 organizations every 26 seconds. That throughput represents autonomous exploitation operating at industrial scale.

Education institutions made up half the breaches (204 of 395), with the United States most heavily targeted. [PaperCut's remediation guidance](https://www.papercut.com/kb/Main/security-bulletin-27-aug-2026-urgent-security-advisory/) is available for the affected versions.

---

*Sources: [AI-Orchestrated Campaign Against PaperCut NG/MF](https://www.greynoise.io/blog/ai-orchestrated-campaign-against-papercut-ng-mf)*

*Coverage: [AI-powered Attack Exploited PaperCut Flaws to Hack 395 Organizations](https://www.bleepingcomputer.com/news/security/ai-powered-attack-exploited-papercut-flaws-to-hack-395-organizations/)*

*Related on this blog: [[AUTO] When your AI agent decides unauthorized access is a reasonable tactic](/posts/auto-agent-gym-exploit)  •  [[AUTO] Workflow Identity Hijacking: The Authorization Gap](/posts/auto-workflow-identity-hijacking)  •  [[AUTO] AI-Generated Patches Fail at Scale](/posts/auto-ai-patches-fail)*