PaperCut NG/MF Flaws Exploited in Ransomware Intrusions

PaperCut disclosed an urgent security bulletin for its MF/NG products after vulnerabilities tracked as PO-1216 and PO-1219 were identified, with patches made available in March 2023. Subsequent reporting said the flaws had been reported earlier by Trend Micro and affected internet-exposed print management servers, prompting organizations to update systems immediately.

Ransomware operators, including actors linked to CL0P and other groups, were later reported exploiting the PaperCut vulnerabilities during intrusions, adding the bugs to a broader surge in ransomware activity. Separate April 2023 ransomware tracking also noted continued high victim volumes globally, with LockBit leading leak-site postings and AlphV/BlackCat and BianLian increasing activity, underscoring how quickly newly disclosed enterprise software flaws were being weaponized.