Print management outfit PaperCut is under 0-day attack, and it’s drawing customers’ blood
The fix is either an unvalidated and unofficial emergency patch or taking the server offline
PaperCut, a print management software company, is currently facing a zero-day attack, which has caused concern among its customer base. The attack was discovered after university security teams alerted PaperCut to a vulnerability in their products, PaperCut NG and PaperCut MF, which manage printer access, usage tracking, and online printing.
The company is treating the matter with the utmost priority, issuing a security advisory urging customers to take immediate action. The exact nature of the vulnerability remains undisclosed, but the web interface of the products appears to provide access to deeper network systems, as indicated by altered log files and alerts from various security tools.
PaperCut has released an emergency patch, but it is not an official release, as they have bypassed their usual release process. The patch instructs customers with public-facing PaperCut servers to restrict access only to trusted internal IP addresses. While this solution may not be ideal for all users, PaperCut emphasizes the importance of applying the patch or taking servers offline as soon as possible.
The company is committed to providing a more robust solution in the near future and will inform customers accordingly.
Written by urgent.news from The Register's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
