Papercut Software Pty Ltd

Mm-hmm.

There was a group of autonomous AI agents that identified a critical unauthenticated RCE flaw in PaperCut print management servers, had a score of 9.8, beating the 9.5, uh, we heard-

Mm-hmm

... about earlier, the highest severity rating, and then, uh, handled everything, uh, themselves.

Um-

I mean, you know, PaperCut servers were internet exposed.

[chuckles]

Okay.

But I think that's, that's a really good...

No, it's a, it's a really good point.

I know you're, you know, brought it up facetiously, right? But, like, I think it's a really good point, because PaperCut, you know, having those servers exposed, there was functionality gained-

Yep

Now they're part of the cybersecurity headlines as well.

Recently disclosed vulnerabilities in the PaperCut print management software were actively exploited in attacks.

The PaperCut software is used by businesses and schools, universities, and other organizations to manage large numbers of printers and users.

And these vulnerabilities can be chained together to bypass authentication and potentially execute remote code on vulnerable PaperCut servers.

Now, when most people hear a printer security problem, they picture somebody somehow hacking the little ink jets sitting behind their desk.

But enterprise printing can be much more complicated than that.

And access to critical technologies may be restricted based on geopolitical considerations.

So what are the strategic implications for organizations navigating this complex landscape? First, immediate patching and forensic review of critical infrastructure like NetScaler and PaperCut are essential to prevent exploitation by both state-sponsored and criminal actors.

The window between vulnerability disclosure and patch adoption is a prime target for attackers and organizations that delay are putting themselves at unnecessary risk.

Second, adaptive risk management and real-time monitoring are becoming mandatory.

I mean, there are a lot of zero days being attacked, but almost none of them are in Windows.

They're in Paperclip and they're in Kaseya and they're in N8N and they're in Ncentral and they're in these kind of, you know, like I've had to stop, like I have to filter out WordPress stuff because there are just so many zero days, like a ridiculous plugins.

Yes.

It's well, it's all in the plugins right now.

Time for the trends, here is what the data is telling us.

The week showed a clear concentration on actively exploited vulnerabilities in internet-exposed edge and infrastructure devices, Citrix NetScaler, PaperCut, GitLab, Artifactory, and ScreenConnect, indicating attacker focus on perimeter systems rather than a single vendor.

Domestically, the SC Alert failure marks the first operational validation of a national crisis warning capability, shifting attention from deployment to reliability and operator delivery responsibility ahead of the announced December retest.

So here's what we're looking at for September 2026.