Latest / The Digital Warfare Podcast
EP. 152: PaperCut NG/MF Zero-Day Exploited in Active Attacks
Summary
PaperCut confirmed on August 27 that attackers are actively exploiting an undisclosed vulnerability affecting PaperCut NG and PaperCut MF, with confirmed customer incidents already under investigation. PaperCut currently considers all versions potentially affected.
The company is urgently instructing organizations with internet-accessible PaperCut Application Servers to restrict their web interfaces to trusted IP addresses using firewall rules, network controls or equivalent measures. PaperCut has reproduced the vulnerability and is developing and validating a code fix.
Preliminary…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.