
Hundreds of AI Agents Hit 440+ PaperCut Instances
GreyNoise tracked AI agents exploiting PaperCut flaws, hitting 440+ instances across 395 organizations in 48 countries. Campaign mechanics and patch guidance.
> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…
143 transmissions

GreyNoise tracked AI agents exploiting PaperCut flaws, hitting 440+ instances across 395 organizations in 48 countries. Campaign mechanics and patch guidance.

Apple's first foldable is here. iPhone Duo pairs a 5.4-inch outer display with a 7.6-inch inner display, runs the A20 Pro chip, and starts at RM9,499.

OpenAI says its agent swarm cracked Navier–Stokes in 88 hours. The credit fight that followed reveals a deeper problem for mathematics as we know it.

AI agents hold credentials and act on the world. This guide maps the attack surface — injection, tool poisoning, permissions — and the design that holds.

Google DeepMind has precomputed molecular-effect predictions for 9 billion possible single-letter DNA variants and packaged them into a 1-petabyte Atlas.

cPanel patched an EmailTrack SQL injection letting a mail account run code as root (CVE-2026-67401, CVSS 9.9). Affected builds, patch steps and open questions.

Tool descriptions are the one input your agent always trusts. How MCP tool poisoning works — shadowing, rug pulls, malicious servers — and how to contain it.

Misi Rakyat says it was hit by a malicious cyberattack. What the Sep 9 statement confirms, what it leaves open, and how it compares to the Sep 8 leak analysis.

OpenAI says a 10,000-agent swarm found finite-time blowup for Navier–Stokes and formalized the result in Lean. Mathematicians are now checking what it proves.

Malaysia's amended PDPA creates real engineering duties: breach notification, DPO rules, processor security, cross-border transfers. A practical build guide.

ServiceNow turns a 15B reasoning model into a Mamba hybrid at 2.1x throughput. The interesting part is how they chose the distillation data.

Samples allegedly expose Misi Rakyat customer, rider and vendor data — location, KYC, config. Here is what can actually be established.