:

PAPERCUT ISSUES SECOND EMERGENCY PATCH FOR EXPLOITED FLAWS

SECURITY DESK1 MIN READ
SUN, AUG 30, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

PaperCut has released a second emergency security update for its NG and MF print management software after researchers discovered bypass methods for the initial fixes. The vulnerabilities are currently being exploited in the wild.

The software maker addressed two actively exploited vulnerabilities that impact PaperCut NG and MF systems. Researchers identified multiple ways to circumvent the first patch, forcing the company to accelerate development of additional fixes. The flaws allow attackers to gain unauthorized access to print management systems, which are widely deployed across enterprises and educational institutions. The active exploitation underscores the urgency of the threat. PaperCut urged all customers to apply the latest update immediately. Organizations running vulnerable versions should prioritize patching to prevent potential compromise of their printing infrastructure and associated data. The company has not disclosed specific technical details about the bypass methods to prevent broader exploitation. Security researchers continue monitoring for additional attack variations.

■ SOURCES

Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

A 68-year-old has been sentenced to over six years in prison in the U.K. for operating an illegal IPTV service that generated £980,812 ($1.3 million) over three years.

4H AGOIndustry Desk

A detailed analysis examines how the internet has shifted toward predatory practices, drawing significant engagement from tech community members on Hacker News with 227 points and 120 comments.

5H AGOIndustry Desk

A critical vulnerability in the popular GiveWP WordPress donation plugin allows unauthenticated attackers to execute arbitrary commands on hosting servers. The maximum-severity flaw requires immediate patching.

5H AGOSecurity Desk

Over 8,300 internet-facing Gitea instances remain unpatched against a critical vulnerability being actively exploited in remote code execution attacks, according to Shadowserver.

6H AGOIndustry Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.