Hackers Exploit N-able N-central Flaw After Initial Fix Falls Short
N-able has released an emergency security update for N-central after attackers used an authentication bypass to gain remote administrator access and reach systems managed through affected servers. The attackers then installed Cloudflare tunnels that allowed them to retain access after their route through N-central was blocked.
N-able has released an emergency security update for N-central after attackers used an authentication bypass to gain remote administrator access and reach systems managed through affected servers.
Because N-central gives managed service providers and IT departments control over customer devices, a compromised server can provide access to many endpoints from one administrative console. The platform is commonly used for remote monitoring, patching, maintenance, and technical support.
For context, signs of the campaign first appeared on July 31, when N-able noticed an unusually high number of licensing problems affecting on-premises N-central customers. Licensing errors are not uncommon, but the volume prompted the company’s engineering and...
Copyright of this story solely belongs to hackread.com. To see the full text click HERE
