Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
9 / 12 results
criticalbug_reportVulnerabilityPaperCut patches two actively exploited flaws used in 395+ breaches
PaperCut NG/MF all versions prior to 26.0.5, 25.0.13, and 24.1.10. Vulnerabilities CVE-2026-81578 and CVE-2026-82078 enable authentication bypass and arbitrary code execution. At least 395 organizations in 48 countries compromised, primarily U.S.
highperson_alertThreat ActorRussian-speaking actor uses AI agents to exploit PaperCut flaws
A likely Russian-speaking threat actor leveraged hundreds of AI agents to orchestrate a large-scale exploitation campaign targeting PaperCut NG/MF servers globally.
criticalbug_reportVulnerabilityPaperCut NG/MF exploited at scale via AI-driven attacks; 440+ instances hit
PaperCut NG/MF (all unpatched versions vulnerable to CVE-2026-81578 and CVE-2026-82078). 440+ instances across 395 organizations in 48 countries compromised, primarily education sector in US, UK, France, Spain, Canada, Belgium, Portugal, Australia, G…
criticalbug_reportVulnerabilityPaperCut auth bypass and RCE chain actively exploited in education sector
PaperCut NG and MF, all versions. Primarily targeting education sector (K-12 schools and universities) in the U.S. and Europe. CVE-2026-81578 (authentication bypass) and CVE-2026-82078 (remote code execution) exploited in chain.
highbug_reportVulnerabilityPaperCut NG/MF zero-days exploited for data theft via auth bypass and RCE
PaperCut NG and MF print management software, all versions prior to Emergency Patch Release 3 (issued September 2026). Affects internet-facing Application Servers.
criticalbug_reportVulnerabilityPaperCut NG/MF actively exploited; second emergency patch released
PaperCut NG and MF print management software versions 24, 25, and 26 on Windows, Linux, and macOS. CVE-2026-81578 (CVSS 8.8) authentication bypass and CVE-2026-82078 (CVSS 9.4) unsafe class-loading vulnerability can be chained for pre-auth RCE.
criticalbug_reportVulnerabilityPaperCut NG/MF flaws chained for unauthenticated RCE, active exploitation
PaperCut NG and PaperCut MF (all unpatched versions). CVE-2026-81578 (CVSS 8.8, improper access control) and CVE-2026-82078 (CVSS 9.4, unsafe dynamic class loading) are chained to bypass authentication and execute arbitrary Java code.
criticalbug_reportVulnerabilityCritical vulnerabilities in PaperCut software require immediate patching
PaperCut software (specific versions not disclosed in advisory). Affects organizations using PaperCut print management solutions.
criticalbug_reportVulnerabilityPaperCut NG/MF zero-day exploited in wild; all versions affected
All versions of PaperCut NG and PaperCut MF print management software. Primary risk: Internet-exposed Application Servers with public-facing web interfaces.