Able2Shell: 33 N-able N-central Zero-Days Under Attack
33 N-able N-central zero-days are being exploited after researcher's public disclosure.
Security firm watchTowr reported exploitation attempts against N-able N-central servers just a day after researcher Sean Bales published 33 unpatched vulnerabilities under the name Able2Shell. N-able took its hosted N-central platform offline worldwide and advised on-premises customers to keep their servers switched off. The vulnerabilities reportedly allow credential theft, creation of rogue administrator accounts, and remote code execution. Bales stated he released the flaws without coordinated disclosure due to N-able's past inaction on other reported vulnerabilities.
AI summary of the linked source. Not reviewed by an editor. How this works
Run N-able?
Get an email when a new story names N-able, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- Incident response retainer
Experts are on call before the worst day, not searched for during it.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — Able2Shell