Follow the latest coverage, related explainers and connected technology stories.
An attacker believed to be Russian-speaking exploited two vulnerabilities in PaperCut NG/MF servers using hundreds of AI agents, compromising 440 instances linked to 395 organizations in 48 countries. The attackers managed to steal credentials and access system secrets and domain administrator privileges at some victims.
Attackers have begun exploiting two vulnerabilities in PaperCut NG and MF, after they were patched last week, to bypass authentication, remotely access print management servers, and extract tables from victims’ databases.
PaperCut has released a second emergency patch to address two actively exploited vulnerabilities in its NG and MF print management software after methods were discovered to bypass the first fix. When chained together, the vulnerabilities allow authentication bypass and remote code execution on affected servers.