Agentes de IA ejecutaron una campaña de explotación masiva contra 440 servidores PaperCut
Blackpoint y GreyNoise documentan a un atacante que usó cientos de agentes de IA para pasar de un espacio vacío a ejecución remota de código en menos de cuatro horas contra PaperCut NG/MF.
# Defensive check — triage a PaperCut NG/MF server after a new security bulletin Report, read-only: - installed version and whether it is a fixed release or version 23 or older - whether the application server is reachable from the public internet - any child process of the PaperCut server (cmd.exe, PowerShell, discovery tools) - unexpected class files under the server library directory - recent changes to user-lookup database driver / URL settings: [REDACTED] Do not patch, restart, delete or run anything. Output the findings table only.