The Numbers
Four Hours From Nothing to a Breach, Then Eleven Victims in Twenty-Six Seconds
GreyNoise says a threat actor pointed hundreds of agents built on OpenAI's Codex and a DeepSeek model at two PaperCut flaws, reaching remote code execution on a real victim in under four hours and compromising eleven organisations in twenty-six seconds once the campaign ran. The exploit was ordinary. The labour was not.
