PAPERCUT ZERO-DAYS EXPLOITED FOR DATA THEFT

Security researchers have documented ongoing attacks leveraging the two PaperCut flaws, which affect widely-deployed print management systems used across enterprises and educational institutions. The vulnerabilities allow attackers to bypass authentication and execute arbitrary code on vulnerable systems. Threat actors are using the exploits to gain network access and exfiltrate sensitive data from compromised organizations. PaperCut released patches addressing the issues, but the window between disclosure and patch deployment has enabled attackers to establish footholds in multiple networks. Organizations running PaperCut NG and MF should prioritize applying the updates immediately. Security teams should review logs for suspicious activity on print management systems dating back to before the patches were released. Indicators include unusual authentication attempts and unexpected administrative account creation on PaperCut servers. The attacks underscore the persistent risk posed by zero-day exploits and the importance of rapid patching cycles for internet-facing and network-critical software.