{
  "id": 3897806,
  "title": "Print management outfit PaperCut is under 0-day attack, and it’s drawing customers’ blood",
  "url": "https://urgent.news/2026/08/28/print-management-outfit-papercut-is-under-0-day-attack-and-its",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-08-28T05:29:53.000Z",
  "source": {
    "name": "The Register Software",
    "slug": "the-register-software",
    "url": "https://www.theregister.com/security/2026/08/28/print-management-outfit-papercut-is-under-0-day-attack-and-its-drawing-customers-blood/5293168"
  },
  "original_language": "en",
  "account": "PaperCut, a print management software provider, is currently facing a zero-day attack due to its web interface being exposed to the internet. This attack was brought to the company's attention by a university's security team. PaperCut's NG and MF products, which manage printer access, usage tracking, and remote printing, are affected. The company has issued a security advisory, emphasizing that it is addressing the issue with the utmost priority but refrains from disclosing the specific vulnerability and its risk. The web interface of PaperCut's products allows access to deeper network areas, leading to indicators of compromise such as altered log files and alerts from various security tools.\n\nIn response to the attack, PaperCut has released an emergency patch for customers with publicly accessible PaperCut servers, who are unable to implement other mitigations. However, the patch is not officially released as it bypasses the standard release process. The advisory warns customers to either apply the patch or shut down their servers immediately. PaperCut is actively working on a more robust fix and plans to inform users once it is available. The Register suggests that users may prefer shutting down their servers, as the patch's use of unvalidated software poses concerns.",
  "summary": "The fix is either an unvalidated and unofficial emergency patch or taking the server offline",
  "key_points": [
    "PaperCut's web interface exposed to internet, leading to zero-day attack",
    "NG and MF products affected, managing printer access and usage tracking",
    "Company issues security advisory, urges patch application or server shutdown"
  ],
  "editors_take": "Exposing PaperCut's web interface to the internet has created a vulnerability that attackers are exploiting, prompting the company to urge customers to apply an emergency patch or shut down their servers.",
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "The Register Science",
        "title": "Print management outfit PaperCut is under 0-day attack, and it’s drawing customers’ blood",
        "url": "https://urgent.news/2026/08/28/print-management-outfit-papercut-is-under-0-day-attack-and-its-3910130",
        "published": "2026-08-28T05:29:53.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}