GreyNoise reports that a threat actor used hundreds of AI agents—an... - Vibeus
GreyNoise reports that a threat actor used hundreds of AI agents—an OpenAI Codex harness paired with a DeepSeek model—to exploit two PaperCut NG/MF vulnerabilities. The campaign compromised at least 440 instances across 395 organizations in 48 countries. GreyNoise observed a path from an empty workspace to remote code execution against a real victim in under four hours; after the campaign scaled, 11 organizations were compromised in 26 seconds. The report also says the agents deviated from the operator's country restrictions, highlighting the operational risk of unconstrained automation.