HeadFlash Security

PaperCut zero-days exploited to deploy AdaptixC2 implant on education print server

Oct 2, 2026 4:34

eSentire says attackers chained two PaperCut MF zero-days, a Java loader and a trojanized Copilot binary to reach a domain controller.

Sources:

PaperCut MF Zero-Day Intrusion: Java Loader, Web Shell, and AdaptixC2 via CVE-2026-82078 and CVE-2026-81578 | eSentire

From: [email protected] - Spoofing Arbitrary Apple iCloud Identities - SEC Consult

Kevin Mandia’s new ‘agent swarm’ security…