Death by a Thousand PaperCuts: AI-Driven Exploitation at Scale

Reported 10 Sep 2026 by otx · Severity: medium

The Adversary Pursuit Group identified a sophisticated exploitation campaign targeting internet-facing PaperCut servers using CVE-2026-81578 and CVE-2026-82078. Analysis uncovered exposed operator infrastructure revealing an AI-assisted workflow spanning vulnerability research, p