Security researchers have reported that recently patched zero-day vulnerabilities in PaperCut NG and PaperCut MF are now being actively exploited to steal data from organisations that haven’t updated.
PaperCut is widely used across UK schools for printing, quotas and secure print release. Print management servers often hold user information and connect to several other systems, which makes them an attractive target.
Why it matters
Schools routinely print pupil data, staff records and safeguarding documents. A compromised print server could expose that information, or give attackers a foothold for a wider attack on the network.
What to do now
- Identify every PaperCut NG and MF installation across your estate.
- Check the installed version and apply the latest vendor security updates.
- If you can’t patch straight away, restrict access to the server and its admin interface.
- Review PaperCut, firewall and network logs for unusual activity.
- Check your backups are available and can be restored.
- Consider changing service account and administrator passwords as a precaution.
If your printing is managed by a print supplier, ask them to confirm in writing that your PaperCut environment has been patched and checked for signs of compromise.
How we can help
This story first appeared in School IT Intelligence Week 4, our free weekly briefing for school IT teams and leaders. Read the full issue or subscribe free to get it every week.
Not sure where your school stands? Give us one day in your school and we’ll review your systems, licensing and security, and show you where money is being wasted and where risk is hiding. Book your IT review day →