OTX Threat: Death by a Thousand PaperCuts: AI-Driven Exploitation at Scale

The Adversary Pursuit Group identified a sophisticated exploitation campaign targeting internet-facing PaperCut servers using CVE-2026-81578 and CVE-2026-82078. Analysis uncovered exposed operator infrastructure revealing an AI-assisted workflow spanning vulnerability research, proof-of-concept development, target sourcing, and campaign execution. Timestamped state files documented an iterative pr CVEs: CVE-2026-81578, CVE-2026-82078