Rapid7 Blog سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۷:۵۰

Critical vulnerabilities in N-able N-central prompt hosted shutdown

OverviewOn November 9, 2026, N-able announced that it was responding to the public disclosure of critical vulnerabilities affecting N-central, its remote monitoring and management (RMM) platform.In a public disclosure titled Able2Shell, an independent researcher has published details and proof-of-concept (PoC) code covering 33 issues. According to the disclosure, the issues include unauthenticated remote code executi…

آسیب‌پذیری و روز صفر امنیت هویت و دسترسی

خواندن متن کامل در Rapid7 Blog درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

TechCrunch Security سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۹:۱۵

N-able takes its remote access service offline after researcher publishes dozens of zero-day bugs

The remote access giant also urged its self-hosted customers to take down their own servers amid a "critical security incident," fearing the possibility of cyberattacks.

آسیب‌پذیری و روز صفر

منبع

SecurityWeek سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۸:۱۶

SAP Patches Critical ICM2SHELL, ProxyGate Vulnerabilities

SAP has published 42 new and updated security advisories, including nine that address critical-severity vulnerabilities. The post SAP Patches Critical ICM2SHELL, ProxyGate Vulnerabilities appeared first on SecurityWeek.

آسیب‌پذیری و روز صفر

منبع

CyberInsider سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۷:۳۹

Apple fixes iMessage flaws that could expose private group chats

Apple released security updates that address two iMessage vulnerabilities that could let attackers join private group conversations and read messages, or allow newly added members to access earlier exchanges. The fixes arrived in iOS 27.2.1 and iPadOS 27.2.1, alongside patches for Bluetooth and AirPlay weaknesses that could enable unauthorized device pairing. Apple’s security advisory credits … The post Apple fixes i…

آسیب‌پذیری و روز صفر توسعه موبایل حریم خصوصی

منبع

Rapid7 Blog سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۷:۳۴

Five Signs Your MDR is All Alert, No Action

Your managed detection and response (MDR) provider flags suspicious activity, and your analyst spends the next hour finding the account, checking logs, and deciding whether anything needs to happen. By the time the investigation is underway, the alert feels less like help and more like a task assignment. MDR should bring your team capacity and expertise when it needs them. If the service keeps handing the hardest wor…

آسیب‌پذیری و روز صفر پاسخ به رخداد و جرم‌یابی

منبع