I doubt many exposed servers have CUPS.
Edit: The article says he did an internet scan showing hundreds of thousands of vulnerable machines.