𝗔𝘂𝗴𝘂𝘀𝘁 𝟮𝟬𝟮𝟲: 𝗡-𝗮𝗯𝗹𝗲 𝗡-𝗰𝗲𝗻𝘁𝗿𝗮𝗹 𝗕𝗿𝗲𝗮𝗰𝗵𝗲𝗱. 𝗧𝗵𝗲 𝗙𝗶𝗿𝘀𝘁 𝗣𝗮𝘁𝗰𝗵 𝗗𝗶𝗱 𝗡𝗼𝘁 𝗪𝗼𝗿𝗸. 𝗔𝗻𝗱 𝗬𝗼𝘂𝗿 𝗠𝗦𝗣 𝗠𝗮𝘆 𝗕𝗲 𝗔𝗳𝗳𝗲𝗰𝘁𝗲𝗱. You have probably never heard...

𝗔𝘂𝗴𝘂𝘀𝘁 𝟮𝟬𝟮𝟲: 𝗡-𝗮𝗯𝗹𝗲 𝗡-𝗰𝗲𝗻𝘁𝗿𝗮𝗹 𝗕𝗿𝗲𝗮𝗰𝗵𝗲𝗱. 𝗧𝗵𝗲 𝗙𝗶𝗿𝘀𝘁 𝗣𝗮𝘁𝗰𝗵 𝗗𝗶𝗱 𝗡𝗼𝘁 𝗪𝗼𝗿𝗸. 𝗔𝗻𝗱 𝗬𝗼𝘂𝗿 𝗠𝗦𝗣 𝗠𝗮𝘆 𝗕𝗲 𝗔𝗳𝗳𝗲𝗰𝘁𝗲𝗱. You have probably never heard of N-able N-central. But your IT provider has. And uses it every day. N-central is the platform MSPs use to manage thousands of client systems simultaneously. One server — access to hundreds of companies. Today it emerged that attackers exploited a critical vulnerability in N-central to gain remote administrative access — and through it reached client systems. CVE-2026-18577. Authentication bypass. Full administrative access without a single password. N-able released a patch. Attacks continued. The first patch was incomplete. A second was released on August 2. That means companies that applied the first patch and believed they were protected remained vulnerable for several more days. But the most alarming part is not that. Attackers used N-central to register Cloudflare tunnels as services on client devices. A Cloudflare tunnel is a persistent encrypted connection between a device and the attacker's server. It stays active even after the vulnerability is patched and the fix is applied. That means even if your MSP has updated N-central — some client devices may still have a hidden access channel that nobody noticed. For Australian small and medium businesses this matters. Most companies under 200 people do not have an internal IT team. They depend entirely on their MSP. If the MSP is compromised — every one of its clients is compromised. And those clients may not know for a very long time.

At Aussie Cyber Guard we help Australian businesses assess their MSP risks and understand the real security posture of the infrastructure being managed on their behalf. Contact us here or on LinkedIn. #CyberSecurity #Australia #MSP #Nable #RMM #SupplyChain #CyberRisk #AussieCyberGuard