International
The Morning Dev

Only the news worth knowing

‹
 

Security · High impactFan score 70 · Tier A8 sources

Hackers Target N-central Zero-Days as N-able Rushes Patches

SecurityWeek · By Ionut Arghire ·

Hackers Target N-central Zero-Days as N-able Rushes Patches

The Brief · written from 8 sources

  • N-able took N-central Hosted Environments offline after a researcher publicly disclosed over 30 zero-day vulnerabilities, tracked as Able2Shell, with public proof-of-concept exploits.
  • N-able urged on-premises customers to shut down their N-central servers until further notice as a precautionary measure.
  • N-able released hotfixes for the zero-days, and SecurityWeek reports that attackers began targeting the flaws shortly after disclosure, with unauthenticated flaws patched first.

Why it matters

N-central is a remote monitoring and management platform, so a compromise can give attackers control over the systems it manages. Organizations running it need to act on the shutdown guidance and hotfixes immediately.

Who’s affected

  • N-central on-premises customers
  • N-central Hosted Environments customers
  • MSPs and IT teams using N-able N-central

What to do

  1. Follow N-able guidance to shut down on-premises N-central servers until further notice, or apply the released hotfixes as instructed by N-able
  2. Check N-central systems for signs of compromise, including unauthorized administrator accounts and credential theft
  3. Review and apply the N-able hotfixes for the unauthenticated and other zero-day flaws

The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones. The post Hackers Target N-central Zero-Days as N-able Rushes Patches appeared first on SecurityWeek .

Read the full story at securityweek.com ↗

Timeline

  1. N-able announced it was responding to the public disclosure of critical N-central vulnerabilities

  2. Researcher publicly disclosed the Able2Shell zero-day flaws with PoC exploits

  3. BleepingComputer

    N-able takes cloud platform offline after 30+ "zero-days" published

  4. N-able took N-central Hosted Environments offline and urged on-premises customers to shut down servers

  5. The Hacker News

    N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC Exploits

  6. SecurityWeek

    N-able Takes N-central Offline as Researcher Drops Over 30 Zero-Days

  7. Rapid7 Cybersecurity Blog

    Critical vulnerabilities in N-able N-central prompt hosted shutdown

  8. TechCrunch

    N-able takes its remote access service offline after researcher publishes dozens of zero-day bugs

  9. N-able released security hotfixes for the zero-day vulnerabilities

  10. BleepingComputer

    N-able releases security hotfixes for zero-day vulnerabilities

  11. darkreading

    N-able Takes N-central Platform Offline After Discovery of 33 Flaws

  12. Attackers were reported targeting the N-central zero-days as N-able rushed patches

  13. SecurityWeek

    Hackers Target N-central Zero-Days as N-able Rushes Patches

Full coverage · 8 sources

How do you feel about this?

0 Comments

    Hackers Target N-central Zero-Days as N-able Rushes Patches – The Morning Dev