GoKawiilN-able N-central hit by cryptominer attacks hours after new zero-day PoC release
Attackers are exploiting a newly disclosed N-able N-central vulnerability called 4EverAble2Shell to install cryptocurrency miners on servers, with researchers counting at least 21 compromised systems, 19 of which had already installed N-able's latest patch. Security researcher Sean Bales released proof-of-concept code for 4EverAble2Shell and a related flaw called Agent2Shell just two days after N-able issued emergency fixes for other critical N-central bugs Bales had disclosed earlier the same week.