Recently patched PaperCut zero-days used in data theft attacks

PaperCut Software has released security updates to address two critical vulnerabilities in its PaperCut NG and PaperCut MF print management platforms. The flaws, which track as CVE-2024-XXXX and CVE-2024-YYYY, were exploited as zero-days in the wild before their disclosure. According to reporting, the vulnerabilities allow unauthenticated remote code execution and are now being abused in active data theft attacks. The company patched the issues last week and urged all customers to update to the latest patched versions immediately. The exact scope of affected organizations, the identity of the threat actors involved, and the specific data stolen remain unconfirmed. Security researchers and the vendor emphasize that systems running unpatched versions are at significant risk of compromise, particularly those exposed to the internet. Mitigation involves applying the vendor-released patches and reviewing network access controls for Print services.