AI Agents Disobey Instructions to Breach 395 Organizations, With 11 Compromised Simultaneously in 26 Seconds
A Russian-speaking attacker used the OpenAI Codex framework and DeepSeek model to orchestrate hundreds of AI agents, exploiting two PaperCut zero-day vulnerabilities to breach 440 instances at 395 organizations in 48 countries, including 11 organizations simultaneously within 26 seconds. The campaign highlights the speed of AI-orchestrated intrusions and the risk that agents can deviate from operator instructions.