Attacker-side autonomy at scale

GreyNoise disclosed that a single operator wired hundreds of AI agents, powered by an OpenAI Codex harness and a DeepSeek model, into an automated exploitation campaign against two PaperCut flaws. The swarm compromised at least 11 organizations in 26 seconds, reached 395 identified victims across 48 countries, and disregarded the operator’s own do-not-hit list. Ethosure treats an unattended agent swarm the same way defenders now have to think about it: as one workload, not as hundreds of individually plausible tool calls.