Attackers Exploit PaperCut Zero-Days to Deploy Remote Access Tools
Threat actors are actively exploiting internet-facing PaperCut Application Servers to covertly install legitimate remote access software. PaperCut NG and MF print management solutions are affected, and customers are urged to restrict web access to trusted IP addresses only. This campaign is rated highly severe due to the potential for remote code execution and lateral movement.