> TritonInfoSec News
Home / Aug 04, 2026 / Story
0
#3 The Hacker News general August 03, 2026 at 06:41 UTC

N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete

By [email protected] (The Hacker News)

AI Summary

N-able's authentication bypass vulnerability CVE-2026-18577 in N-central RMM servers was actively exploited after the vendor's initial patch proved incomplete, allowing attackers to gain remote administrative access and pivot to customer-managed systems. N-able shipped the first unaffected build (2026.3.1.7) on August 2, 2026. The incident is particularly severe because N-central serves as a managed service provider platform, meaning a single compromised server can expose downstream client environments at scale.

Read full article → https://thehackernews.com/2026/08/n-able-says-atta…

Relevance score: 86.0/100

# More from August 04

  1. 1
    Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts The Hacker News
  2. 2
    INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws The Hacker News
  3. 4
    The OpenAI Hack Shows the Genie Is Out of the Bottle Schneier on Security
  4. 5
    Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts BleepingComputer
  5. 6
    Bitcoin hardware wallet maker destroys some inventory after more than $88 million stolen The Record
  6. 7
    Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS The Hacker News
  7. 8
    ExfilSquad hackers leak info of over 100,000 UK police officers, staff BleepingComputer
  8. 9
    New DOUBLECUP ClickFix service hides malware in browser cache images BleepingComputer
  9. 10
    Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable The Hacker News