2026-08-31: Two PaperCut zero-days (CVE-2026-81578, CVE-2026-82078) are under active exploitation against print

Show Notes - 2026-08-31

Stories Covered: - Today: - PaperCut NG/MF Zero-Days Under Active Exploitation (CVE-2026-81578, CVE-2026-82078) (https://www.securityweek.com/more-details-emerge-on-exploited-papercut-vulnerabilities/) - Berlin Refuses $2.3M Rhysida Ransom After 5.7TB Government Data Theft (https://www.securityweek.com/berlin-wont-pay-extortion-group-claiming-data-theft/) - ValleyRAT Backdoor Distributed via Signed Chinese Adware Installer (https://securelist.com/valleyrat-backdoor-adware/121175/) - Fake School Websites Target Education Sector at Record Volume (https://databreaches.net/2026/08/30/cybercriminals-build-fake-school-websites-as-education-attacks-hit-record-high/) - DoJ Corrects China Hacking Statement: U.S. Agencies Were Targets, Not Confirmed Victims (https://thehackernews.com/2026/08/doj-corrects-china-hacking-claim-says.html) - Dutch Intelligence Agencies to Receive Expanded Surveillance Powers (https://news.risky.biz/risky-bulletin-dutch-intel-services-to-get-extensive-new-powers/) - Former DIA IT Specialist Pleads Guilty to Espionage (https://databreaches.net/2026/08/30/us-government-snitch-finder-pleads-guilty-to-leaking-state-secrets-to-foreign-spies/) - VA White River Junction Data Breach (https://databreaches.net/2026/08/30/vt-local-va-warns-of-possible-data-breach/) - PaperCut NG/MF: CVE-2026-81578 and CVE-2026-82078 (https://www.securityweek.com/more-details-emerge-on-exploited-papercut-vulnerabilities/) - YARA-X 1.20.0 and YARA 4.5.6-4.5.8 Released (https://isc.sans.edu/diary/rss/33288)

CVEs Referenced: CVE-2019-11510, CVE-2026-81578, CVE-2026-82078

Indicators of Compromise: Domains: qtproxy[.]xyz, qt-proxy[.]org, qt-team[.]com, fastlink[.]ws

Full brief: https://carolinacleartech.com/brief/2026-08-31/