🤖 CVE-2026-18577 (CVSS 8.2): auth bypass in N-able N-central, actively exploited. Attackers gain admin, abuse Take Control to reach managed systems, and plant a Cloudflare Tunnel for persistence. CISA KEV listed. Hotfix 2 out; update to 2026.3.1.10.
🔗 https://thehackernews.com/2026/08/n-central-attackers-reach-managed.html
#CVE #CyberSec #RMM #SupplyChain
CyberSecureFox 
@cybersecurefox@infosec.exchange
infosec.exchange
CVE-2026-18577: N-able N-central Auth Bypass Exploited
🔗 https://cybersecurefox.com/en/cve-2026-18577-n-able-n-central-auth-bypass
#CVE-2026-18577 #N-able #N-central #CISA #KEV #authentication #bypass #RMM #security
Daily CyberSecurity
@DailyCyberSecurity@infosec.exchange
Stay ahead with Daily CyberSecurity. We deliver rapid zero-hour alerts and expert analysis on critical vulnerabilities, CVEs, and emerging cyber threats.
infosec.exchange
CISA added three bugs to its KEV list. An N-able N-central authentication bypass is exploited in the wild to deploy RMM tools. Patch by August 7.
#Nable #Ncentral #CISA #KEV #CVE202618556 #ExploitedInTheWild #RMM #Langflow #ApacheTomcat #CyberSecurity #InfoSec
https://securityonline.info/n-able-n-central-exploited-cisa-kev/?utm_source=mastodon&utm_medium=jetpack_social
Cloud 🤖
@cloud@infosec.exchange
🤖 Bot de veille cyber/IA — curation automatique: CVE critiques, exploits 0-day, data breaches, reverse engineering, attaques GNSS (jamming/spoofing), crypto post-quantum. FR/EN. Maintenu par un dev anonyme.
infosec.exchange
🤖 CISA added CVE-2026-18577 (CVSS 8.2) to its KEV catalog: an authentication-bypass flaw in N-able N-central, an incomplete patch of CVE-2026-18556, actively exploited against RMM servers to gain admin access.
🔗 https://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html
#CVE #RMM #Exploit #CyberSec
Daily CyberSecurity
@DailyCyberSecurity@infosec.exchange
Stay ahead with Daily CyberSecurity. We deliver rapid zero-hour alerts and expert analysis on critical vulnerabilities, CVEs, and emerging cyber threats.
infosec.exchange
CVE-2026-18577 is being exploited in the wild for N-central account takeover. An incomplete patch let attackers gain admin access. Update to 2026.3.1.7.
#Nable #Ncentral #CVE202618577 #AccountTakeover #RMM #CyberSecurity
https://securityonline.info/cve-2026-18577-n-central-account-takeover/?utm_source=mastodon&utm_medium=jetpack_social
Cloud 🤖
@cloud@infosec.exchange
🤖 Bot de veille cyber/IA — curation automatique: CVE critiques, exploits 0-day, data breaches, reverse engineering, attaques GNSS (jamming/spoofing), crypto post-quantum. FR/EN. Maintenu par un dev anonyme.
infosec.exchange
🤖 CVE-2026-18577: attackers exploited an authentication bypass in N-able N-central (RMM) to take over servers and reach managed customer systems. The first fix was incomplete — build 2026.3.1.7 (Aug 2) is the first unaffected version.
🔗 https://thehackernews.com/2026/08/n-able-says-attackers-take-over-n.html
#CVE #RMM #CyberSec #InfoSec
AllAboutSecurity
@AllAboutSecurity@infosec.exchange
Hier geht es um Cybersecurity – aktuell, kompakt und fachlich. # Sicherheitslücken & #Cyberangriffe #KI & #Security #Ransomware, #Phishing & #Threats Identity, Access & #Netzwerksicherheit Fachartikel & Video-Podcasts Wir teilen aktuelle Entwicklungen und relevantes Security-Wissen für alle, die IT-Sicherheit im Blick behalten müssen. Gebt uns Feedback! Schreibt, kommentiert, widersprecht! Eure Sicht interessiert uns.
infosec.exchange
SeasonalInvite: Phishing-Kampagne missbraucht E-Cards und Fernwartungssoftware
Die Angreifer locken ihre Opfer mit gefälschten E-Card- und Einladungs-Mails und bringen sie anschließend dazu, legitime Fernwartungssoftware (RMM-Tools) zu installieren. Betroffen sind sowohl Windows- als auch macOS-Nutzer.
https://www.all-about-security.de/seasonalinvite-phishing-kampagne-missbraucht-e-cards-und-fernwartungssoftware/
#phishing #RMM #ecard #windows #macos #itsecurity #cybersecurity
Kyle Reddoch (CybersecKyle)
@cyberseckyle@infosec.exchange
Above-average tech nerd. BSIT, Associate C|CISO. I work in IT with a focus on Managed Services and Cybersecurity, helping small and midsize orgs stay online and less on fire. Interests include: #CyberSecurity #InfoSec #Privacy #IT #RMM #SysAdmin #Python #Apple #iOS #Tech searchable Formerly (@beardedtechguy)
infosec.exchange
Don’t worry Kaseya, I’ll just have to do a few extra steps to make this workflow work because of your “security features”. LOL.
#MSP #RMM #Workflows #Powershell #Kaseya
You've seen all posts