N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist

N-able has released a fresh round of hotfixes for N‑central as part of its investigation into ongoing exploitation of a recently disclosed security flaw in the Remote Monitoring and Management (RMM) product. "We are proactively expanding protections in response to ongoing monitoring of threat actors as they evolve their attack techniques," the company said. "This is not a duplicate of our

The article reports that N-able released a second hotfix for N-central after confirming ongoing exploitation of a critical authentication-bypass flaw that let attackers gain administrative access and reach managed customer systems. Reported attacker activity included persistence via Cloudflare Tunnel and use of the compromised RMM platform to pivot into downstream endpoints.[1][2] RealGround analysis: this is a supply-chain-adjacent risk because compromise of a managed service platform can propagate into many customer environments, so organizations should inventory exposed management tools, verify patch status, and review remote-access and persistence controls.