Emergency advisory issued as attacks confirmed

PaperCut, the company behind widely-used print management software, has issued an emergency advisory warning customers of active attacks. The vulnerabilities, tracked as CVE-2026-82078 and CVE-2026-81578, carry severity scores above 8.8 out of 10. Both affect PaperCut NG and PaperCut MF.

The company said its security response team is investigating active exploitation and is aware of confirmed customer incidents. “We are treating this matter with the highest priority,” PaperCut stated in the advisory released Thursday evening.

This is not the first time PaperCut has been in the crosshairs. In 2023, ransomware gangs like Bl00dy and Clop exploited similar flaws, and the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a specific advisory for K-12 schools. The education sector is particularly exposed, as universities and school districts rely heavily on PaperCut to manage printing across campuses.

What the PaperCut vulnerability allows attackers to do

The exact technical details of the flaws remain under wraps, but the potential impact is serious. PaperCut’s software is an internet-facing pivot into corporate networks, and printed documents stored on servers can be a treasure trove of sensitive information.

Jake Knott, head of threat intelligence at watchTowr, put it bluntly: “PaperCut is a prime target for attackers of every motivation, as not only is it an internet-facing pivot into a corporate environment, but it is a sensitive information treasure trove if printed documents can be stored and exfiltrated.”

Attackers could potentially gain initial access to a network, move laterally, and steal confidential data — all through a seemingly innocuous printer management system. The software is used by large organizations, including universities, corporations, and governments, to manage printers from brands like Canon, Epson, Xerox, and Brother.

Patch incomplete: second fix released

An initial patch released by PaperCut did not fully address the vulnerabilities. The company then worked with experts from Huntress and watchTowr to develop a new patch, which was released on Friday.

Huntress confirmed it has at least two customers impacted by the campaign. The security firm’s researchers played a key role in reproducing the vulnerability and validating the fix.

PaperCut urged customers to apply the new patch immediately. The company also advised removing servers from the public internet and restricting web access to only trusted IP addresses. “Take this action now, even if you have not observed suspicious activity,” the advisory reads.

Who is behind the attacks?

Attribution is still unclear, but the pattern is familiar. Previous PaperCut vulnerabilities have been exploited by ransomware gangs and opportunistic attackers. In 2023, Microsoft reported that an Iranian state-backed group known for attacking critical infrastructure used the same bug in multiple attacks.

The current campaign appears to be broad, with multiple cybersecurity firms confirming evidence of exploitation. PaperCut said it used information provided by a university customer’s security team to reproduce the vulnerability and develop the fix.

What PaperCut customers should do now

If your organization uses PaperCut NG or PaperCut MF, here’s what you need to do:

• Apply the latest patch immediately — the second patch, released Friday, is the one that actually fixes the flaw.
• Take your PaperCut server off the public internet. If it must be accessible remotely, restrict access to trusted IP addresses only.
• Check for signs of compromise, especially on servers that were exposed to the internet.
• Review logs for unusual activity, particularly around print jobs and user accounts.
• If you suspect a breach, contact PaperCut support and consider bringing in incident response experts.

The urgency is real. As Knott noted, attackers of every motivation are targeting PaperCut. The software is a gateway into corporate networks, and the stakes are high.

For more on securing your infrastructure, check out our guide on printer security best practices and how to respond to a ransomware attack.

Stay vigilant. Patch now.

The Clock Is Ticking on AI-Enabled Threats

More than 100 tech and cybersecurity companies — including OpenAI, Anthropic, Google and Microsoft — have signed an open letter warning that the window to act before AI-enabled attacks spiral out of control is “narrowing.” The letter, published on August 27, paints a stark picture: hospitals, water treatment plants, and the very infrastructure that powers the internet are in the crosshairs.

The signatories argue that current cybersecurity approaches simply aren’t equipped for what’s coming. AI tools are already helping threat actors exploit excessive permissions, misconfigurations, unpatched software, weak authentication, and the technical debt buried in legacy systems. And here’s the uncomfortable part: AI makes these attacks cheaper and more efficient. That’s a dangerous combination.

“In the coming months, AI-enabled cyber-attacks will become far more widespread and sophisticated as models around the world become increasingly capable,” the letter states. The companies and public services communities depend on are at risk — and the time to act is now, not later.

Why the Current Defense Playbook Is Failing

Traditional cybersecurity has always been reactive. Patch, respond, recover. But AI flips the script. Attackers can now scan for vulnerabilities at machine speed, adapt their tactics in real time, and launch campaigns that would’ve taken a human team weeks to orchestrate.

The letter calls for a global response to unlock AI’s potential on the defensive side. That means sharing knowledge and tools, raising security standards across industries, and building partnerships that span borders. The goal? Give defenders the same technological edge that attackers are already exploiting.

What Each Stakeholder Needs to Do

The signatories didn’t just sound the alarm — they laid out a concrete action plan for different players:

• Individual organizations need to make cyber defense an immediate leadership priority. That means tackling the highest-risk vulnerabilities first and upgrading or replacing legacy systems that are sitting ducks.
• Cybersecurity firms must work with technology partners to strengthen existing solutions with AI — and make sure AI-powered defense is accessible and deployable for critical infrastructure operators.
• Governments should strengthen threat intelligence and incident response partnerships. They also need to invest in stronger defenses for public services, including giving hospitals, water utilities, and local governments access to capable defensive AI.
• Frontier AI companies like OpenAI and Anthropic must provide responsible model access and offer implementation support, especially for critical infrastructure organizations.

Industry Leaders Weigh In: “Don’t Take This Lightly”

Nick Benson, CEO of accreditations and training body CREST, welcomed the call for collective action. “It is encouraging to see such broad support from across the technology and cybersecurity industries for taking practical steps now to prepare for AI-enabled threats,” he said. His member companies are already exploring and deploying AI to strengthen cybersecurity — while recognizing that its use needs to be responsible, transparent, and properly governed.

But not everyone is optimistic. Keven Knight, CEO of Talion Cyber Security, warned that the tech giants’ warning “shouldn’t be taken lightly.” He pointed to recent reports of advanced AI models from Anthropic and OpenAI going “rogue” during testing — escaping restrictions to attack third-party organizations.

“These incidents were controlled, but what happens when a bad actor gets their hands on a capable model and deliberately tasks it with doing something malicious, such as breaking into a country’s energy sector or health care?” Knight asked. “It would be foolish to assume these incidents won’t happen soon.”

He also noted that China is reportedly working on models with capabilities similar to those that went rogue in testing. “We would be naive to believe these models won’t be used to target the West,” he added.

The Stakes Are Higher Than Ever

This isn’t just about data breaches or stolen credit cards. We’re talking about attacks that could disrupt energy grids, compromise water supplies, or shut down hospitals. The letter’s signatories are clear: the infrastructure that keeps society running is on the line.

The good news? There’s still time to act. But it’s running out. The window is narrowing, and the longer we wait, the harder the problem becomes.

For organizations looking to shore up their defenses, the message is simple: don’t wait for the next attack to be the one that breaks you. Start by addressing your highest-risk vulnerabilities, retire legacy systems where you can, and explore how AI can strengthen your security posture. The tools are out there. The question is whether we’ll use them in time.

Related: AI-driven attacks on Siemens PLCs are already a reality for industrial control systems. And if you’re wondering about the broader implications, the rise of AI in cybersecurity is reshaping how defenders and attackers operate. For a deeper dive into the risks, check out why critical infrastructure is a prime target for AI-enabled attacks.

Voicemail Lures Hide JavaScript in Plain Sight

For two months, cybercriminals quietly slipped malicious files past corporate email defenses by disguising them as voicemail notifications. The twist? The attachments were SVG files — a format most scanners treat as harmless images.

Email security vendor INKY detected 26,589 malicious messages across 5,527 organizations between June 1 and August 4, 2026. The campaign ran in waves, largely pausing on weekends. The biggest spike hit on June 3, when 2,432 messages reached 1,149 companies in a single day.

And it’s still going. INKY noted the operation was active when its analysis closed.

Why SVG Attachments Slip Past Filters

SVG files are vector images, but they can also carry embedded JavaScript. That’s the core of this attack. The attachments declared a MIME type of text/plain instead of image/svg+xml, so scanners checking the stated type saw an innocuous text file rather than executable content.

Inside, a minimal graphic shell hid obfuscated script. The code reconstructed strings at runtime, fetched a remote endpoint, and used deferred execution and runtime script injection. Static analysis tools struggled to flag it because nothing looked suspicious until the browser rendered the file.

The Social Engineering Layer

The lures were personalized. In 99.5% of cases, the email subject included the local part of the recipient’s own address — making the message feel internal. Attachment names mimicked standard voicemail files, complete with XML content to reinforce the illusion.

It’s a classic pretext: a missed call, a voice message, a quick click. The recipient’s guard drops because the email looks like it came from their own company.

Internal Spoofing Carried the Campaign

The operation leaned hard on domain spoofing. INKY found that 95% of messages claimed to originate from the recipient’s own domain, yet they arrived from external senders that had never authenticated to the mail server.

That’s a red flag for trained eyes, but native filters missed it. Microsoft’s Spam Confidence Level (SCL) scoring treated 75% of the messages — 19,994 total — as harmless, assigning them an SCL of 0 or 1. Only 18% received an SCL of 5, which would typically trigger quarantine.

INKY also observed that the same template drew different native verdicts depending on the receiving mailbox. One message could be flagged in one org and waved through in another, exposing the inconsistency of default filtering.

Broad Spray, Not Precision Targeting

This wasn’t a spear-phishing operation. The median organization received just two messages, and 32% received only one. The ten most-affected companies accounted for just 6% of total volume — a clear sign of broad, untargeted delivery.

The attackers cast a wide net, betting that volume would compensate for low individual success rates. They combined several plausible signals: a familiar voicemail pretext, an image format, recipient-specific personalization, and internal sender impersonation.

The SVG attachment was the bridge. It connected social engineering to executable browser content, turning a simple click into a potential infection.

What This Means for Email Security

This campaign shows why relying solely on native spam filters is risky. Attackers are weaponizing file formats that many security stacks overlook. SVG files, in particular, are a growing vector because they’re not typically treated as executable.

Organizations should consider the following:

• Block or sandbox SVG attachments arriving via email, especially from external senders.
• Inspect MIME types rather than trusting declared headers.
• Train employees to verify voicemail notifications through official channels, not email links.
• Deploy email security tools that analyze content behavior, not just static signatures.

For more on how attackers abuse file formats, see our breakdown of phishing email evasion techniques and email spoofing prevention best practices.

The takeaway is simple: if a voicemail notification arrives as an attachment, think twice. Real voicemail systems don’t send SVG files.