LIVE · cybersecurity feed
Live wire
Metabase Zero-Day Exploited in the Wild, Exposing Admin Access and Sensitive DataCritical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise DataSensitive Info Goes Into ‘No Reply’ Emails Constantly. This Guy Sees It AllAtlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to AttackersNew CSS Attacks Can Break Webmail Defenses to Steal Passwords and TokensCVE-2023-38646 · Metabase Zero-Day Exploited in Wild Allows Admin Access Without AuthenticationCVE-2026-18577 · N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and PersistCVE-2026-8037 · Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit AttemptsLiving off the coding agent: Two tales of tunnels and LaunchAgentsInside the Modern SOC: The Identity Front Door

persistence

CVE-2026-18577high

N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist

N-able has released Hotfix 2 for its N-central platform to address an actively exploited zero-day vulnerability. Attackers leveraged this flaw to gain administrative access, persist on managed systems using Cloudflare Tunnel, and maintain access even after the initial exploit was mitigated. The company confirmed a limited number of customers were affected and is providing additional indicators of compromise and tools for detection.