AGENTS CRITICAL NEW
AI 智能体对 440 台 PaperCut 服务器发起大规模利用行动
Blackpoint 与 GreyNoise 记录了一名攻击者利用数百个 AI 智能体,在不到四小时内从空白工作区做到对 PaperCut NG/MF 的远程代码执行。
2026-09-29 // 5 分钟
阅读完整分析 →
# example prompt — illustrative, defensive
# Defensive check — triage a PaperCut NG/MF server after a new security bulletin Report, read-only: - installed version and whether it is a fixed release or version 23 or older - whether the application server is reachable from the public internet - any child process of the PaperCut server (cmd.exe, PowerShell, discovery tools) - unexpected class files under the server library directory - recent changes to user-lookup database driver / URL settings: [REDACTED] Do not patch, restart, delete or run anything. Output the findings table only.