More autonomous use of artificial intelligence in cyber operations and compromise of PaperCut servers

The RIA overview describes increased use of artificial intelligence in cyber operations, testing for vulnerability discovery, and several AI-related incidents. Anthropic reported that Claude-based multi-agent workflows were used for reconnaissance, tool development, infrastructure management, stolen-data processing, and adapting malware to evade detection. According to GreyNoise, a likely Russian-speaking attacker compromised at least 440 PaperCut NG/MF instances belonging to 395 organizations in 48 countries.