Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

Threat actors are exploiting newly disclosed PaperCut flaws, CVE-2026-81578 and CVE-2026-82078, to steal credentials in attacks targeting schools and universities in the US and Europe. The Arctic Wolf Adversary Research Team observed the authentication bypass and remote code execution chain.