News Summary

• PaperCut on Thursday released a new security maintenance release that replaces all previously published emergency patches.
• The release supersedes the emergency patches that were shipped to address two security flaws as well as two regressions.
• The vulnerabilities have come under active exploitation in the wild to bypass authentication and execute arbitrary code on susceptible instances.
• In one case, a suspected Russian-speaking threat actor has been found weaponizing the two flaws to break into at least 395 organizations in 48 countries, most of them concentrated in the u.s.