[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fsIoZ5qgfdRPehizcOwp8pIaf6MtpsbnuDBaxhr-iyps":3},{"article":4,"iocs":49,"watch_terms":54,"solutions":55,"lesson":28},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"e5ff1d78-f333-41d9-a18e-1ee733302fda","Able2Shell: 33 N-able N-central Zero-Days Under Attack","able2shell-33-n-able-n-central-zero-days-under-attack-ee4ba3","watchTowr reports exploitation attempts a day after 33 unpatched N-central flaws were published; no hotfix or CVE IDs yet.","Security firm watchTowr reported exploitation attempts against N-able N-central servers just a day after researcher Sean Bales published 33 unpatched vulnerabilities under the name Able2Shell. N-able took its hosted N-central platform offline worldwide and advised on-premises customers to keep their servers switched off. The vulnerabilities reportedly allow credential theft, creation of rogue administrator accounts, and remote code execution. Bales stated he released the flaws without coordinated disclosure due to N-able's past inaction on other reported vulnerabilities.","33 N-able N-central zero-days are being exploited after researcher's public disclosure.","https:\u002F\u002Fwww.cyberkendra.com\u002F2026\u002F11\u002Fable2shell-n-able-n-central-zero-days.html","https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FwSBr52uIhWs","2026-11-10T11:03:00+00:00","2026-11-11T08:00:17.965529+00:00",9,[17,20,23],{"name":18,"type":19},"N-central","product",{"name":21,"type":22},"N-able","vendor",{"name":24,"type":25},"Sean Bales","threat_actor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":26,"icon":28,"name":29,"slug":30},null,"Vulnerabilities","vulnerabilities",[32,37,39,44],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":38},{"id":26,"icon":28,"name":29,"slug":30},{"category":40},{"id":41,"icon":28,"name":42,"slug":43},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":45},{"id":46,"icon":28,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[50],{"type":51,"value":52,"context":53},"malware","Able2Shell","Name of the vulnerability set and associated exploitation attempts.",[21,18],{"controls":56,"vendors":139},[57,86,111],{"slug":58,"name":59,"problem":60,"products":61},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[62,70,78],{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":79,"vendor_name":80,"vendor_logo":81,"product_slug":82,"product_name":83,"url":84,"description":85},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":87,"name":88,"problem":89,"products":90},"patch-management","Automated patch management","Known holes get closed in days, not months.",[91,99,107],{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":87,"product_name":108,"url":109,"description":110},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"slug":112,"name":113,"problem":114,"products":115},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[116,124,131],{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"truesec","Truesec","\u002Fvendor-logos\u002Ftruesec.png","truesec-incident-response","Truesec Incident Response","https:\u002F\u002Fwww.truesec.com\u002Fservice\u002Fincident-response","Incident response team with a retainer option.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":43,"product_name":128,"url":129,"description":130},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",{"vendor_slug":132,"vendor_name":133,"vendor_logo":134,"product_slug":135,"product_name":136,"url":137,"description":138},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","mandiant-incident-response","Mandiant Incident Response","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fconsulting\u002Fmandiant-incident-response-services","Incident response services from Mandiant, available on retainer.",[140],{"slug":141,"name":142,"logo_path":143,"roles":144},"watchtowr","watchTowr","\u002Fvendor-logos\u002Fwatchtowr.png",[145],"reported_by"]