PaperCut Issues Emergency Patches as Threat Actors Target Chained Vulnerabilities

Recently patched PaperCut zero-days used in data theft attacks

Two security vulnerabilities in the PaperCut NG and MF print management software, patched last week after being exploited as zero-days, are now being abused in data theft attacks. [...]

PaperCut issues emergency patches as threat actors target chained vulnerabilities

The print management software maker faced a wave of attacks in 2023 aimed at higher education customers.

PaperCut issues emergency patches as threat actors target chained vulnerabilities | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware - National Cyber Security Consulting

PaperCut issued emergency patches on Friday to address critical vulnerabilities in its print-management software.  The company confirmed in a security advisory that multiple customers were successfully targeted and that it is working with security researchers at Huntress and watchTowr to respond to the attacks.  The vulnerabilities include an improper access-control flaw in PaperCut MF and PaperCut NG. […] Thank you for subscribing to our RSS fe…

ShinyHunters claims it stole 284 million patient records from McKesson

Healthcare company McKesson disclosed a cybersecurity incident in which hackers got into third-party applications and stole data. McKesson is a major U.S. healthcare company that distributes pharmaceuticals, medical supplies and other healthcare products to pharmacies, hospitals and clinics. According to the SEC filing, the intrusion was detected on August 25, 2026. The company said the investigation “is in its early stages,” and that it has not…

PaperCut Issues Second Emergency Patch As Researchers Break Fix For Exploited Zero-Days

PaperCut released a second emergency patch last Friday, for two vulnerabilities in its NG and MF print management servers that attackers are already exploiting, after security researchers demonstrated that the vendor's first fix could be bypassed. The two flaws work as a chain. CVE-2026-81578, rated 8.8 on the CVSS scale, is an improper access control weakness in the PaperCut web management interface that lets unauthenticated remote requests rea…