PaperCut warns of NG, MF flaw exploited in zero-day attacks

PaperCut has warned that a zero-day vulnerability in all versions of PaperCut NG and MF is being actively exploited in the wild, with confirmed customer incidents; the company released emergency patches and is urging organizations with internet-exposed servers to restrict access to trusted IPs. The advisory provides indicators of compromise (e.g., suspicious pc-app.exe activity and modified/missing server.log entries) and mitigation steps, but details of the flaw, attacker identity, and post-compromise activity remain undisclosed; the report also notes prior PaperCut flaws were exploited by ransomware groups such as Clop.