A threat intelligence firm says it watched a Russian-speaking attacker turn hundreds of AI agents loose on a print management platform and compromise 440 servers in 48 countries — including 11 organizations in 26 seconds. It is the most vivid account yet of an autonomous intrusion campaign. It is also, so far, a single-source story that the vendor at the center of it has pointedly declined to endorse.
GreyNoise published the report on Sept. 9, describing a campaign it says launched Aug. 31 against PaperCut NG and MF, the self-hosted Java print management software used by a frequently cited 100 million people. The firm says it observed the operation through its own sensor network rather than ...