Recently patched PaperCut zero-days used in data theft attacks

Attackers exploited two critical zero-day vulnerabilities in PaperCut print management software to bypass authentication, execute remote code, and exfiltrate database contents before patches were available. The chaining of these flaws demonstrates how sophisticated threat actors can combine vulnerabilities to maximize impact, moving beyond simple system compromise to targeted data theft. Print management software is often overlooked in security programs despite having broad network access and storing sensitive user and configuration data. This incident underscores that any internet-facing or internally accessible application — even peripheral management tools — must be included in vulnerability management and rapid patching programs.