N-able takes remote access service offline after researcher publishes dozens of zero-day flaws

N-able has taken its remote access service offline today after a security researcher published dozens of zero-day vulnerabilities, TechCrunch reports. The company also urged customers running self-hosted instances to take down their own servers amid what it called a critical security incident, citing the risk of cyberattacks, according to TechCrunch. Remote access tools sit at the heart of IT operations, and public zero-days can be weaponized quickly, raising the risk of compromise across organizations relying on the platform.

TechCrunch said N-able acted after the researcher disclosed multiple unpatched flaws at once, and it is not yet clear whether the bugs have been exploited. Watch for confirmation of active exploitation, any mitigation guidance or patches, and when N-able plans to restore remote access services to customers. [Developing. This article will be updated.]