Security

CISA adds two PaperCut flaws to exploited-vulnerabilities catalog

The image is a graphic with a blue background featuring text that says "Known Exploited Vulnerabilities Catalog" and "cisa.gov." There is an "Updated" label with a red arrow above the "U." The CISA logo is in the lower right corner. Image: Primary
CISA Cyber
CISA said it added two PaperCut NG/MF vulnerabilities to its Known Exploited Vulnerabilities Catalog: CVE-2026-81578, described as missing authentication for a critical function, and CVE-2026-82078, described as unsafe reflection. The agency urged organizations to apply mitigations. CISA's post does not state affected versions, exploitation details, mitigation steps, or a remediation deadline.
Sources
CISA Cyber (@CISACyber)
In this story
US Government
Published by Tech & Business, a media brand covering technology and business. This story was sourced from CISA Cyber (@CISACyber) and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Security
Security

Berlin confirms extortion attempt after Rhysida data theft

Berlin's city administration has confirmed that cybercriminals are attempting to extort the city after Rhysida listed it on a data-leak site. The attack was discovered in mid-August, according to the report, and affected Senate de...

BleepingComputer
Security AI
Security AI

Researchers link Aurora ransomware activity to Cursor AI agent use

CloudSEK and Gambit Security reported that operators associated with Aurora ransomware used Cursor's agentic coding tools while working against victim networks. Gambit said it observed Cursor Agent running Anthropic's Claude Sonne...

The Hacker News
Security
Security

ServiceNow issues patches for three CVSS 10 code-injection flaws

ServiceNow said it has deployed patches across hosted instances and released hotfixes for self-hosted deployments after disclosure of four vulnerabilities in its AI platform and Now Platform. Three flaws, rated CVSS 10, allow code...

SecurityWeek
Products Security
Products Security

Redshift adds private IAM Identity Center authentication

AWS said Amazon Redshift now supports IAM Identity Center authentication for provisioned clusters and serverless workgroups using enhanced VPC routing. Customers can use corporate single sign-on while token validation and exchange...

Recent Announcements