16/09/2026
🚨 AI-Powered Attacks Are Changing the Cybersecurity Landscape
A newly reported campaign is actively exploiting critical vulnerabilities in PaperCut NG/MF, using AI-driven automation to identify, exploit, and compromise vulnerable systems at unprecedented speed. More than 440 instances across 48 countries have reportedly been compromised, with attackers achieving full domain administrator access in as little as seven minutes.
What makes this attack particularly concerning is not just the vulnerabilities themselves, but the scale and speed enabled by AI. Once compromised, attackers have a direct pathway into Active Directory, creating opportunities for credential theft, lateral movement, ransomware deployment, and data exfiltration.
If your organisation uses PaperCut NG/MF, now is the time to:
✅ Verify patch levels across all instances
✅ Restrict external access to PaperCut web interfaces where possible
✅ Review logs and monitor for indicators of compromise
✅ Assess whether other internet-facing applications could present similar risks
The reality is that most organisations don't struggle because vulnerabilities exist. They struggle because they don't have visibility of what needs patching, prioritisation of what matters most, or the resources to continuously monitor and manage risk.
At ITM Tech, our Vulnerability Management Service helps organisations identify, prioritise, and remediate security weaknesses before attackers can exploit them. We provide continuous visibility, expert guidance, and actionable remediation plans that reduce cyber risk and support compliance requirements.
📩 If you'd like to understand your organisation's exposure and improve your vulnerability management strategy, get in touch with the ITM Tech team.
