OTX Threat: Inside a PaperCut Attacker's AI Toolkit: Agent Instructions, Exploit Code, a Second RCE, and Victims Across 45+ Countries

Three exposed directories on infrastructure at 45.142.193[.]132 revealed an AI-orchestrated campaign targeting PaperCut NG/MF print management software. The exposed workbench contained AI-agent instructions, exploit code, operational logs, and post-exploitation tooling. Attackers exploited CVE-2026-81578 and CVE-2026-82078 through a Tapestry vulnerability chain, and developed a second RCE path via CVEs: CVE-2026-81578, CVE-2026-82078 Sectors: Education