N-Able N-Central - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/n-able-n-central/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 13 Nov 2026 04:36:28 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgGPUStack, ConnectWise, N-able, and M365 Security and Availability Updateshttps://feed.craftedsignal.io/briefs/2026-11-gpustack-n-able-screenconnect-cve-2026-102895/Fri, 13 Nov 2026 04:36:28 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-gpustack-n-able-screenconnect-cve-2026-102895/This brief summarizes reports regarding GPUStack authentication bypass scans, a ConnectWise ScreenConnect security advisory, public exploit code for N-able N-central, and a Microsoft 365 availability incident.Recent reports cover several security and service disruptions:

  • GPUStack (CVE-2026-102895): Scans are targeting a vulnerability where an attacker can spoof the X-GPUStack-Real-IP header with the loopback address to bypass authentication.
  • ConnectWise ScreenConnect: The company is investigating the compromise of approximately 400 customer and partner sites and has disabled certain third-party plugins.
  • N-able N-central: Public exploit code has been released for at least three N-central vulnerabilities that were previously disclosed without vendor notification.
  • Microsoft 365: A significant availability event impacted services including Exchange, Outlook, and related single sign-on functions like Entra.

Impact

Active scanning is occurring for the GPUStack authentication bypass. ConnectWise is investigating compromises in hundreds of environments. Unverified public exploit code exists for N-able N-central. Microsoft 365 users experienced service disruptions.

Recommendation

Organizations using affected platforms should review the respective vendor advisories and monitor official status pages for updates and remediation guidance.

]]>mediumthreat