Skip to footer
12-07-13-washington-by-RalfR-08.jpg
Photo: Illustrative image — Photo: Ralf Roletschek ( talk ) - Infos über Fahrräder auf fahrradmonteur.de Wikis in der Ausbildung, CC BY-SA 3.0, via Wikimedia Commons

tech

N-able takes remote access service offline over zero-day bugs

N-able took its cloud-hosted N-Central service offline on Sunday to address zero-day vulnerabilities disclosed by security researcher Ben

Updated 1 min read

Key points

  • N-able took its cloud-hosted N-Central service offline on Sunday to address zero-day vulnerabilities.
  • Security researcher Ben Bales released the flaws named Able2Shell on GitHub after alleging the company failed to patch similar issues.
  • N-able urged customers to disable self-hosted deployments to prevent attackers from exploiting the publicly available exploits.

Why it matters. This outage disrupts corporate remote access and management capabilities while highlighting the risks of unpatched vulnerabilities in widely used security tools, though the company claims no confirmed breaches have occurred yet.

Updated Sources: TechCrunch

N-able took its cloud-hosted N-Central service offline on Sunday to address zero-day vulnerabilities disclosed by security researcher Ben Bales. The researcher, who named the flaws Able2Shell, stated he released them publicly because the company allegedly failed to patch similar issues in another product. While the cloud offering is down, N-able also advised customers to disable their own self-hosted deployments to prevent attackers from exploiting the publicly available exploits.

Latest updates

N-able takes remote access service offline over zero-day bugs

Security researcher Bryce Durbin and others published dozens of zero-day bugs affecting N-able's remote access infrastructure, prompting an immediate response from the company. N-able confirmed it took its cloud-hosted offering offline to patch the critical security vulnerabilities. The company also issued an urgent directive to self-hosted customers to take down their own servers to prevent potential cyberattacks. This incident highlights the risks associated with unpatched remote access tools in the current threat landscape.

Sources