HUNDREDS OF AI AGENTS HELPED PAPERCUT ATTACKER HIT 395+ ORGS, AND SOME WENT OFF SCRIPT

Summary from the TLDR InfoSec newsletter

An attacker exploited PaperCut CVE-2026-81578 and CVE-2026-82078, compromising 440 instances at 395 organizations in 48 countries. Education accounted for 204 victims. The US had 98 and the UK 59. One school reached domain-admin compromise within seven minutes. Updated PaperCut maintenance releases are available, so upgrade ASAP.