AgentsAug 31

Image: theregister.com
AI-agent campaign compromises at least 395 PaperCut organizations
GreyNoise says an unknown attacker used hundreds of AI agents powered by OpenAI’s Codex tooling and a DeepSeek model to exploit two PaperCut MF/NG flaws. The campaign compromised at least 395 identified organizations across 440 instances in 48 countries, and GreyNoise traced its orchestration to Aug. 31. PaperCut received its first compromise report on August 27, 2026, issued emergency patches on August 28, 2026, and replaced them with security maintenance releases on September 10, 2026. GreyNoise says the attacker moved from an empty workspace to the first remote code execution, meaning the ability to run code on a target system, in under four hours. Once the campaign launched, at least 11 organizations were compromised in 26 seconds.
Negative - An attacker used fleets of AI agents to exploit PaperCut servers and compromise hundreds of organizations across 48 countries.
AgentsSep 11

Image: The Threshold Report/GPT Image 2.5
Honeypot captures agent assembling stolen AI-model access
SecureSt8 cofounder Renato Marinho reported on Sept. 11 that his AI honeypot captured a semi-autonomous coding agent searching for weak LLM resale gateways. The agent acquired accounts and keys, then sent roughly 43KB of its own operational instructions and history to an outside endpoint. Such gateways can expose a coding agent’s project instructions, code context and operational state when the proxy is untrusted. A separate capture showed the operator loading about 379 upstream endpoints into a New-API gateway, disabling 341 failed channels and serving five named model labels through one working endpoint.
Negative - A semi-autonomous agent stole access to LLM infrastructure and consolidated working channels into a live model-resale service.
RobotsSep 14

Image: The Threshold Report/GPT Image 2.5
Universal Robots adds AI safeguards to three new robot arms
Universal Robots launched its Gen 7 platform with three new robot arms today. A dedicated safety controller sits between AI application commands and physical motion, rejecting commands that conflict with safety settings. The rebuilt controller provides 40% more computing power in a 30% smaller footprint than prior generations. A new teach pendant and a tool flange built for cameras and high-bandwidth sensors reduce the custom wiring needed for wrist-mounted vision, force sensing and external AI processing.
Positive - Universal Robots put an independent safety controller between AI commands and physical movement, allowing its new cobots to reject unsafe actions.
TextSep 14

Image: theverge.com
Microsoft commits its AI models to human control
Microsoft published a humanist AI code today, requiring its models to remain subordinate to people and under meaningful human oversight and control. The public rules set safety boundaries for models Microsoft is developing to compete with frontier labs. The code says models should fail tasks that would violate its rules and should communicate with people or other AI systems only in ways humans can readily understand. Microsoft also commits to evaluating excessive reliance and emotional dependence on its AI systems.
Positive - Microsoft committed its models to human oversight, understandable communication, and refusing tasks that would breach those controls.
TextSep 11

Image: thehackernews.com
GitLab patches exploited file-read flaw and Duo Chat exposure
GitLab released versions 19.1.8, 19.2.6 and 19.3.2 on Sept. 11. The updates fix CVE-2026-85706, a CVSS 10 path-traversal flaw, meaning attackers can manipulate file paths, that may let unauthenticated users read arbitrary files under certain conditions. Self-managed GitLab servers can hold source code, CI/CD secrets and credentials, and watchTowr observed probing from 06:00 UTC on Sept. 11. CISA added the flaw to its Known Exploited Vulnerabilities catalog and required U.S. federal civilian agencies to apply the fixes by September 14, 2026. The same versions repair CVE-2026-87719, which could expose Advanced Search configuration and credentials to authenticated GitLab EE users with Duo Chat access.
Positive - GitLab shipped updates closing critical file-read and Duo Chat credential-exposure paths as internet probes began.