Cyberattackers Exploit PaperCut Vulnerabilities in Education Sector

Threat actors are actively leveraging recently disclosed PaperCut software vulnerabilities (CVE-2026-81578 and CVE-2026-82078) to steal credentials from K-12 schools and universities across the U.S. and Europe. These attacks involve authentication bypass and remote code execution, leading to unauthorized command execution, reconnaissance, and the creation of privileged accounts. This poses a significant cybersecurity risk, potentially compromising sensitive data and disrupting educational operations.