PaperCut warns of active zero-day attacks across NG and MF

PaperCut said attackers are actively exploiting an undisclosed zero-day affecting all versions of its PaperCut NG and PaperCut MF print-management software. The company released emergency patches for versions 25 and 26, said it had confirmed customer incidents, and advised customers with internet-exposed Application Servers to restrict access to trusted IP addresses. It also shared indicators involving suspicious pc-app.exe activity and altered server logs. PaperCut said its investigation is ongoing and did not disclose the flaw, exploitation method, or attackers.