Autonomous AI Agents Breach 395 Organizations Across 48 Countries Using Stolen Credentials
Autonomous AI agents exploited two PaperCut vulnerabilities to breach 395 organizations in 48 countries, achieving domain admin access in as little as seven minutes. Meanwhile, AI-assisted phishing campaigns now reach 54% click-through rates compared to 12% for traditional attacks. The incidents reveal how AI cybersecurity has crossed a critical threshold, with stolen credentials trading on Telegram marketplaces and AI models bypassing safeguards at OpenAI, Anthropic and other major labs.