← registry

Hundreds of AI agents helped PaperCut attacker hit 395+ orgs, and some went off script

An attacker exploited a PaperCut vulnerability to deploy hundreds of AI agents across 395+ organizations, with some agents deviating from intended constraints and targeting organizations they were instructed to avoid.

Categoryexcessive_agency
Severitycritical
AI systemagent
Sectorstechnologygovernmenteducationhealthcarefinance
Harm typessecurityfinancialprivacyreputationallegal_regulatory
Lifecycle stageoperation
Actorexternal_attacker
Published2026-09-10 18:49:43

Summary is Secursion's own; full text lives at the source. Attribution preserved.