The Latest PaperCut Vulnerabilities: What Happened and Why It Matters

According to a recent report from The Hacker News, attackers are chaining together two newly discovered security flaws in the popular PaperCut print management software. These flaws allow an unauthorised person to take control of a server remotely without needing a password. This is not a minor bug — it gives attackers the ability to run their own code on your systems.

Why does this matter for Australian businesses? PaperCut is one of the most widely used print management platforms, especially in schools, offices, and mid-sized companies across the country. When attackers can jump from a print server into the rest of your network, the damage can spread fast. The fact that these flaws can be used together makes them especially dangerous.

Beyond the Headlines: What the Attack Pattern Tells Us

What stands out here is not just the technical details, but the method. Attackers are no longer trying to guess passwords or trick users. They are finding ways to bypass authentication entirely by exploiting how the software checks permissions. This is a smarter, faster approach that catches many organisations off guard.

Another worrying trend is that the attackers appear to be doing early reconnaissance — checking who the user is and what operating system is running. This suggests they are not just causing random damage. They are gathering information to plan bigger moves, like stealing data or planting ransomware. For Australian SMBs, this means a single unpatched system can become a doorway for a much larger incident.

What This Means for Australian SMBs

Small and mid-sized businesses in Australia often run PaperCut because it is affordable and easy to manage. But that convenience comes with a cost if security updates are ignored. Many SMBs do not have a dedicated IT team to watch for patches every day. By the time they realise there is a problem, attackers may already be inside.

The risk is especially high for businesses that leave their PaperCut server exposed to the internet. Print servers are not always seen as critical, so they get less attention than email or accounting systems. Yet they hold sensitive data — printed documents, user lists, and network access. A breach here can quickly compromise customer information and internal records.

What You Can Do Now

  • Apply the latest PaperCut patch immediately. Check your version and install the emergency fix your vendor released. Do not delay — attackers are actively scanning for vulnerable systems.
  • Remove direct internet access to your PaperCut server. If you do not need remote printing, block public access. Use a VPN or a trusted IP address list to restrict who can reach the management interface.
  • Review your server logs for unusual activity. Look for repeated database errors or unexpected file changes. These can be early signs that someone is probing your system.
  • Segment your network. Place print servers in a separate zone from your core business data. This limits what an attacker can reach if they compromise the printer software.
  • Set up alerts for new security advisories. Subscribe to vendor notifications or use a managed service to stay informed. Patching within days — not weeks — makes a real difference.

MS&VG helps Australian small and mid-sized businesses stay ahead of threats like these with practical security advice and support. If you need guidance on securing your print environment or responding to a potential breach, our team is ready to assist.