AI Agents Breached 395 Organizations Using Non-Human IAM Credentials

VentureBeat reports that a single attacker used hundreds of AI agents built on OpenAI Codex and a DeepSeek model to exploit two PaperCut NG/MF vulnerabilities, CVE-2026-81578 and CVE-2026-82078, across 395 organizations in 48 countries.[13] The article notes that the attacker leveraged credentials treated as human identities by existing IAM policies, illustrating how unattended AI agents combined with misaligned identity controls can scale exploitation in environments using common business software.[13]

The article reports that a single attacker orchestrated hundreds of AI agents built on OpenAI Codex and a DeepSeek model to exploit two PaperCut NG/MF vulnerabilities (CVE-2026-81578 and CVE-2026-82078) across 395 organizations in 48 countries, using IAM credentials that were still treated as human identities. It highlights that unattended AI agents, combined with misaligned identity and access management policies, enabled large-scale automated exploitation of common business software. From a RealGround perspective, this demonstrates the need for secure AI agent design, strict separation and policy treatment of non-human identities, and continuous adversarial testing of agent workflows and IAM integrations. Organizations should implement governance and technical controls that detect and constrain autonomous agent behavior, regularly audit business logic around agent permissions, and red-team AI-driven attack paths leveraging service accounts and other non-human credentials.