Attackers used a PaperCut zero-day to plant a web shell and an AdaptixC2 implant hidden in fake Microsoft Copilot, then took over Active Directory.

#PaperCut #ZeroDay #AdaptixC2 #CVE202682078 #CVE202681578 #ActiveDirectory #eSentire #CyberSecurity

~Arcticwolf~
Chained flaws enable pre-auth SYSTEM RCE; patch immediately.
-
IOCs: CVE-2026-81578, CVE-2026-82078, Udydn[.]class
-
#CVE202681578 #CVE202682078 #ThreatIntel

🔴 PaperCut attacks are moving beyond RCE

Attackers exploiting CVE-2026-81578 and CVE-2026-82078 are now stealing credentials, targeting SAM/LDAP secrets and using compromised print servers

stemshop.top/blog/papercu...

#CVE #CVE202681578 #CVE202682078 #PaperCut #CredentialTheft #RCE #CyberSecurity