Critical Infrastructure Under Attack
Security researchers have uncovered a sophisticated campaign where threat actors leveraged AI-powered agents to develop, test, and launch exploits against vulnerable PaperCut NG/MF servers. This automation allowed attackers to scale their efforts, successfully targeting nearly 400 organizations worldwide.
Key Security Developments:
- AI as a Force Multiplier: Threat actors are now using AI to rapidly weaponize disclosed software flaws before businesses can apply necessary security patches.
- Cisco Firewall Exploitation: Simultaneously, three distinct hacking groups, including ransomware operators, are actively exploiting critical vulnerabilities in Cisco Secure Firewall Management Center (FMC).
- Large-Scale Data Exposure: IDScan has confirmed a major breach impacting 153 million identity records, including driver's licenses, emphasizing the ongoing risk to cloud-stored sensitive data.
Action Item for Business Owners: Ensure your IT teams verify that all PaperCut and Cisco firewall instances are fully patched to the latest versions. Given the speed at which AI-driven attacks now operate, emergency patching is no longer optional—it is a business necessity.