NewsHive
CONTACT USANALYST PORTAL →
securityBACKGROUND

PaperCut warns of NG, MF flaw exploited in zero-day attacks

BACKGROUND
6 SIGNALSFIRST DETECTED 27 August 2026
Narrative synthesis pending — 6 signals collected.
How the story developed
27 Aug
Other feeds and industry voices
28 Aug
Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication

Malicious actors are exploiting a newly patched security flaw in PaperCut NG and MF to execute arbitrary code on susceptible instances, as the company released a fresh emergency

REPORT · WHAT · The Hacker NewsOPEN STORY
14 May
Cisco warns of new critical SD-WAN flaw exploited in zero-day attacks

Cisco is warning that a critical Catalyst SD-WAN Controller authentication bypass flaw, tracked as CVE-2026-20182, was actively exploited in zero-day attacks that allowed

REPORT · WHAT · BleepingComputerOPEN STORY
13 Apr
Adobe rolls out emergency fix for Acrobat, Reader zero-day flaw

Adobe has released an emergency security update for Acrobat Reader to fix a vulnerability, tracked as CVE-2026-34621, that has been exploited in zero-day attacks since at least

REPORT · WHAT · BleepingComputerOPEN STORY
6 May
Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution

Palo Alto Networks has released an advisory warning that a critical buffer overflow vulnerability in its PAN-OS software has been exploited in the wild. The vulnerability, tracked

REPORT · WHAT · The Hacker NewsOPEN STORY
26 Aug
Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting

REPORT · WHAT · The Hacker NewsOPEN STORY
16 Oct
BeyondTrust patches zero-day exploited in attacks since August

BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. [...]

REPORT · HOW · BleepingComputerOPEN STORY
30 Apr
Critical cPanel and WHM bug exploited as a zero-day, PoC now available

The critical CVE-2026-41940 authentication bypass vulnerability in cPanel, WHM, and WP Squared is being actively exploited in the wild and has been leveraged in attempts since

REPORT · WHAT · BleepingComputerOPEN STORY
1 Jul
Over 900 Oracle E-Business instances exposed to ongoing attacks

Over 900 Oracle E-Business Suite (EBS) instances have been found exposed online amid ongoing attacks exploiting a critical security flaw. [...]

REPORT · WHAT · BleepingComputerOPEN STORY
Sources
BleepingComputer×4The Hacker News×2

NewsHive monitors these sources continuously. All signal titles above link to the original reporting.

Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →