CISA confirmed on 31 August that two vulnerabilities in PaperCut NG and MF print management software are being actively exploited in the wild. CVE-2026-81578 allows unauthenticated remote attackers to bypass authentication and access admin functions, whilst CVE-2026-82078 enables arbitrary code execution once inside. The vulnerabilities are designed to be chained together, and the initial emergency patch issued by PaperCut was broken by security researchers within days, forcing a second fix. For UK small businesses running PaperCut, this warrants same-day action: confirm your version, verify the second patch has been applied, and restrict internet-facing admin panels to internal network access only. The episode also covers Manic, a new Android banking trojan that exfiltrates credentials through peer-to-peer relay without requiring a direct internet connection, raising questions about SMS-based two-factor authentication on personal devices used for business access. Practical steps include checking your mobile device policy and migrating from SMS codes to authenticator apps where feasible.
