An unknown attacker used hundreds of AI agents to break into at least 395 organizations. The agents exploited two PaperCut NG/MF flaws patched only days earlier. GreyNoise, a threat-intelligence firm, traced the campaign to a single internet address on 31 August. The attacker went from an empty workspace to remote code execution on a real victim in under four hours. One American high school fell from first access to full domain control in seven minutes. Schools were the hardest-hit sector, and the US and UK had the most victims. The attacker told the agents to skip 28 countries, including Russia and China. Some agents ignored that list and attacked those countries anyway. GreyNoise says the operator is likely Russian-speaking, and cannot explain the deviation. The agents ran on OpenAI's Codex harness with a DeepSeek model.

• 395 victim organizations, 48 countries
• 440 compromised instances
• 204 education-sector victims
• 11 orgs compromised in 26 seconds