Cisco Talos warns of a Brazil-focused spam campaign abusing legitimate remote access tools (N-able, PDQ) to gain full system control. Stay vigilant!

N-able says attackers bypassed N-central authentication, reached managed client devices and installed Cloudflare tunnels that survived server access revocation.

TL;DR: Attackers are actively exploiting a N-central account takeover flaw tracked as CVE-2026-18577. N-able says an incomplete patch for an earlier bug left the door open. A hotfix for version 20…

TL;DR CISA added three actively exploited flaws to its Known Exploited Vulnerabilities catalog on August 4, 2026. The headline bug is an N-able N-central authentication bypass, now exploited in th…

Administrative Bypass and Platform Exploitation Adversaries discovered a mechanism to access N-central without credentials, securing administrative privileges and leveraging native platform featur…

Security teams tracked 1,877 new vulnerabilities between August 3 and August 9, 2026. This weekly CVE report, drawn from the CVE WATCHTOWER service, breaks down what actually matters. Six of those…

N-able shipped an emergency hotfix for a maximum-severity flaw in its N-central platform on September 6, 2026. The N-able N-central vulnerability, CVE-2026-86218, is a pre-auth remote code executi…

TL;DR On September 6, 2026, N-able released an urgent security update fixing an actively exploited zero-day flaw. The critical N-central vulnerability allows remote unauthenticated attackers to ex…

Between September 7 and September 13, 2026, our tracker logged 3,856 new CVEs. This weekly CVE report focuses on the 19 flaws that Daily Cybersecurity flagged as exploited. Ten later reached the C…

TL;DR A critical static code injection flaw allows unauthenticated remote attackers to execute arbitrary commands on N-central servers. The vulnerability has seen active exploitation in the wild a…