Recently patched PaperCut zero-days actively used in data theft attacks
Two security flaws in PaperCut NG and MF software, recently patched after zero-day exploitation, are now driving data theft attacks.
Two security vulnerabilities in the PaperCut NG and MF print management software are now being actively abused by malicious actors for data theft attacks. Although emergency patches were released last week following reports of active zero-day exploitation, attackers have quickly leveraged the flaws for large-scale campaigns.
Security researchers note that these vulnerabilities allow unauthenticated attackers to remotely access vulnerable servers and extract sensitive data. The transition from initial zero-day exploitation to widespread data theft underscores the urgency of applying security patches.
Organizations worldwide relying on PaperCut products are urged to verify their installation status and ensure all systems are updated to the latest patched versions. Failing to do so leaves corporate networks exposed to severe breaches.
For technology professionals and system administrators, this incident serves as a critical reminder of how fast threat actors operationalize newly disclosed vulnerabilities. Ensuring robust patch management is essential for defending enterprise infrastructure against modern cyber threats.
