N-able takes N-Central offline after published zero-day bugs
Hosted N-Central is down, and customers were told to shut self-hosted installs while fixes are applied.
1
Stories per day · 30 days
5 RSS
Relatedteamviewer3able2shell2it-support-scam2microsoft-teams2n-able2n-central2privilege-escalation2quick-assist2social-engineering2vishing2zero-day2account-takeover1ai-misuse1android1apex-accelerator1bec1canada1code-execution1
37 stories, newest first · one card per story
Stories tagged #remote-access
Hackers log in with stolen credentials in average 8 minutes
Attackers access systems in an average of 8 minutes using stolen credentials in 27 confirmed cases, abusing AI coding tools and remote monitoring software.
1
SolarWinds Dameware command injection flaw could allow remote system compromise
Critical CVE-2026-28336 in SolarWinds Dameware allows attackers to take over remotely controlled computers.
TeamViewer before 15.83 lets a host attack the viewer (CVE-2026-111585)
A malicious host can crash the viewer and, on Windows, Remedio showed code execution that is not yet fully remote.
2
TeamViewer clients before 15.83 let malicious hosts run code on viewers
CVE-2026-111585 is an integer overflow scored 8.8 and fixed in 15.83; TeamViewer reports no known exploitation.
1
TeamViewer clients before 15.83 affected by vulnerabilities, Canada warns
Windows, Linux and macOS clients and the Android app before 15.8.3 are listed, with no CVEs named.
Huntress post says attackers turn MDM into remote access
The provided page is mostly site navigation; the article body describing the MDM technique is not included.
1
Tailscale investigating Tailscale SSH privilege-escalation flaws
Authorized Tailscale SSH users may exceed their local-user permissions; a patched client is targeted for October 27.
Fake Microsoft Teams IT support used for remote access and malware
Arctic Wolf tied more than 400 cases to external chats, inbox floods, and tools such as Quick Assist, sometimes within 15 minutes.
1
Akamai post urges agencies to move past legacy VPNs
The October 20 post frames hybrid-work hardware load and aging VPNs as reasons for public-sector access changes, without incident details.
1
Inbox flooded with sign-up messages? Email bombing explained
Email bombing floods inboxes with signup mail to hide fraud alerts or enable fake tech-support scams.
3
“Don’t Get Played”: TOKEN2049 Security Event Faces Remote-Access Scam Allegations
TOKEN2049 side-event organizers allegedly pushed attendees to install remote-access software; no losses confirmed.
1
Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers
Attackers remotely heated Danfoss fridge controllers at hundreds of French supermarkets, spoiling stock and causing tens of millions in losses.
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
Attackers are exploiting CVE-2026-102255, a CVSS 10 unauthenticated SSRF flaw in SonicWall SMA 1000 appliances.
Luna Moth Leaks Shed Light on Ransomware Group's Inner Workings
Leaked internal files expose Luna Moth's phone-based social engineering operation, where paired callers and remote-access operators extort victims' data.
1
SonicWall Fixes Max Severity Pre-Auth Flaw in SMA1000 Appliances
SonicWall patched a CVSS 10 pre-auth SSRF in SMA1000 appliances, with no evidence of exploitation.
Hackers Abuse Legitimate ScreenConnect Tool to Gain Remote Access Through Phishing
Phishers sent a fake payment notice that installed a legitimate ScreenConnect client aimed at their server.
5
Attackers Abuse Legitimate ScreenConnect Client in Phishing Campaign to Gain Remote Access
Phishers deliver a legitimately signed ConnectWise ScreenConnect client preconfigured to call back to attacker infrastructure, bypassing malware detection for remote access.
5
TeamViewer Fixes Five Remote Access Flaws
TeamViewer patched five high-severity flaws, including local privilege escalation, in Full Client and Host.
Critical TeamViewer Vulnerabilities Enable Code Execution Attacks Via Remote Session
TeamViewer patched five high-severity flaws, including an 8.8 access-control bypass that could enable code execution.
2
Hackers Disguise Remote Access Tools as Zoom and PDF Installers to Take Over PCs
Hackers phish employees with fake Zoom and PDF installers that deploy signed MSP360 and ScreenConnect access.
TeamViewer urges users to patch severe flaws “as soon as possible”
TeamViewer urges immediate updates for five high-severity client and host flaws, including a remote code-execution bug.
5
TeamViewer security advisory (AV26-977)
Canada’s Cyber Centre says TeamViewer Full Client and Host have vulnerabilities and urges updates.
Crooks use fake desktop apps to fool HR staff into giving them remote access
Attackers impersonate US HR and payroll vendors with fake desktop apps that silently install ConnectWise ScreenConnect.
5