> TritonInfoSec News
Home / Nov 13, 2026 / Story
0
#2 BleepingComputer general November 12, 2026 at 19:51 UTC

New N-able "4EverAble2Shell" zero-day exploited hours after PoC released

By Lawrence Abrams

AI Summary

The 4EverAble2Shell zero-day in N-able N-central was weaponized within hours of public PoC release, with at least 21 servers confirmed compromised and attackers deploying cryptocurrency miners. The flaw is part of a broader 33-vulnerability disclosure targeting the RMM platform, and exploitation of patched systems underscores the supply-chain risk to MSPs and their downstream clients.

Read full article → https://www.bleepingcomputer.com/news/security/new…

Relevance score: 87.0/100

# More from November 13

  1. 1
    Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2 The Hacker News
  2. 3
    US seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance CyberScoop
  3. 4
    Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely The Hacker News
  4. 5
    International operation dismantles malware networks, exposes 6.4 million stolen credentials CyberScoop
  5. 6
    ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients The Hacker News
  6. 7
    Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass The Hacker News
  7. 8
    New Windows SignDrop zero-day gives hackers SYSTEM privileges BleepingComputer
  8. 9
    Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories The Hacker News
  9. 10
    AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets The Hacker News