N-able takes its remote access service offline after researcher publishes dozens of zero-day bugs

N-able has taken its cloud-hosted remote access service offline to address a slew of zero-day bugs published by a security researcher, Ben Bales, and is urging customers to take down their self-hosted deployments to prevent potential cyberattacks. The bugs, dubbed Able2Shell, can steal credentials, create new administrative accounts, and grant root access to affected systems. N-able has no evidence of successful exploitation, but is taking proactive measures to secure its environments. Customers will be unable to use their N-Central service during this time. The company is also investigating whether it has the ability to check for exploitation, such as through server logs.