Microsoft Warns of State-Sponsored Attacks Exploiting Critical PaperCut Vulnerability

Iranian nation-state groups have now joined financially motivated actors in actively exploiting a critical flaw in PaperCut print management software, Microsoft said.
The tech giant's threat intelligence team said it observed both Mango Sandstorm (Mercury) and Mint Sandstorm (Phosphorus) weaponizing CVE-2023-27350 in their operations to achieve initial access.
"This activity shows Mint

access attacks critical critical flaw cve cve-2023-27350 exploiting flaw initial access intelligence iranian joined management mango mango sandstorm mercury microsoft mint mint sandstorm nation operations papercut papercut vulnerability phosphorus print sandstorm software sponsored state team tech threat threat intelligence vulnerability