It appears another (there have been many the past months) CRITICAL "zero auth" attack for N-Able dropped over the weekend, and N-Able has no response other than "Shut it down and await further instructions" today.

Sorry for linking to poison site, but it's the only place they have a public visible mention of it. Nothing on their site, not even logged in.

https://old.reddit.com/r/Nable/comments/1xrspdf/important_ncentral_critical_security_incident/

I know we're in the age of AI ruining absolutely everything, but the last few months of them calling us ON THE PHONE to insist we patch RIGHT NOW, TODAY leading up to WE HAVE NO PATCH, SHUT IT DOWN is my "last straw" with this company.

Will edit this post when/if I hear back. We're what- 6 hours in as a paying customer and they're full radio silence outside of the email telling us to shut 'er down.

edited again: 8 hours later, absolute radio silence. If you have NABL stock, (not a financial advisor) I suggest you dump it first thing in the morning.

you are viewing a single comment's thread
view the rest of the comments
[–] 7 points 3 hours ago (6 children)

Yes. They've been around for years and were owned by Solarwinds for a while. Product is a bit janky but broadly works, about par for the course for enterprise software.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 6 points 3 hours ago (1 child)

    Amazing. "Shut it down" is an apocalyptic level response.

    I mean, I've experienced that response on individually compromised hosts/appliances, but not for an entire software suite before.

  • source
  • parent
  • hideshow 1 child comment
  • [–] [S] 9 points 3 hours ago* (last edited 59 minutes ago)

    It's their cloud hosted AND self hosted. The entire NCentral platform on AND off-cloud is currently completely shut down. No update from them for 4 hours since the announcement.

    This comes after 2 months of EMERGENCY, DROP WHAT YOU ARE DOING AND PATCH IMMEDIATELY updates- over and over and over.

    edited: words are hard
    edited again: 8 hours later, absolute radio silence. If you have NABL stock, (not a financial advisor) I suggest you dump it first thing in the morning.

  • source
  • parent
  • [–] [S] 4 points 3 hours ago (3 children)

    They're still under that ownership, the company tried to wipe the name off the internet after their last horrific exploit.

  • source
  • parent
  • hideshow 3 child comments