N-able takes N-Central offline after published zero-day bugs
Original title: AI-Powered Malware Analysis: From Hidden Phishing Attacks to Faster SOC Response
Hosted N-Central is down, and customers were told to shut self-hosted installs while fixes are applied.
N-able confirmed it took its cloud-hosted N-Central remote-access service offline to remediate vulnerabilities published this week without advance notice. Researcher Ben Bales released the bugs on GitHub on Sunday under the name Able2Shell, describing credential theft, new administrative accounts, and root access. N-able urged customers to take down self-hosted N-Central deployments because the exploits are public. The company said it has no evidence of successful exploitation in customer environments.
Unconfirmed: N-able reports no evidence of exploitation but did not confirm it can verify that; Bales’ claim about an earlier unpatched report is alleged.
- Bales published the bugs on GitHub on Sunday and called them Able2Shell.
- He told Bleeping Computer he released them after an alleged failure to patch another product.
- Customers cannot use hosted N-Central while remediation is underway.
- A spokesperson did not answer whether N-able can check for exploitation in logs.
Impact: Steal credentials, create admin accounts, and gain root
| Product | Affected |
|---|---|
| N-able N-Central | — |
- 1.Take self-hosted N-Central deployments offline until N-able publishes remediation.
- 2.Treat published Able2Shell exploits as available to attackers against exposed N-Central systems.
- ATT&CK
- T1136 Create Account
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | slybee.com | Related analyses panel showing 70+ TI analyses One domain, slybee[.]com, provided a useful starting point for deeper research. A |
From the original article
5 min read at cybersecuritynews.com
A suspicious PDF opens normally. The link inside leads to a CAPTCHA page. Nothing obviously malicious appears, yet the real attack is still several steps away.
By Balaji N · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.