Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Metasploit Exploit Targets Actively Exploited PaperCut NG/MF Zero-Day RCE Chain
Malware Families
Excerpt
A new Metasploit Framework module is poised to make a recently disclosed, actively exploited PaperCut NG and MF zero-day chain more accessible. Rapid7 contributor Stephen Fewer submitted pull request #21842 for CVE-2026-81578 and CVE-2026-82078, flaws that combine authentication bypass with remote code execution. The development arrives days after PaperCut confirmed customer incidents. Every PaperCut NG and MF version may be affected. Metasploit Exploit Targets Actively…
Read the original report →Diamond Model
Adversary
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-81578 | High | Score 70/100 | First seen |
| CVE | CVE-2026-82078 | High | Score 70/100 | First seen |
IOC Relationship Graph
Building graph…