N-able Pulls N-central Offline After 30-Plus Alleged Zero-Days; OpenSSH SSHole Now Exploited
Tuesday, November 10, 2026 · 9 min
N-able took hosted N-central offline and told on-prem customers to shut down after a researcher published exploits for more than 30 alleged flaws, while the OpenSSH SSHole bug moved to confirmed exploitation. Plus: Qubole's trusted AWS access abused against its customers, and a second breach at AI inference provider Fireworks.
Listen
Show notes
N-able took hosted N-central offline and told on-prem customers to shut down after a researcher published exploits for more than 30 alleged flaws, while the OpenSSH SSHole bug moved to confirmed exploitation. Plus: Qubole's trusted AWS access abused against its customers, and a second breach at AI inference provider Fireworks.
In this episode
- N-able takes cloud platform offline after 30+ "zero-days" published — BleepingComputer
“N-able has taken its hosted N-central environments offline and urged on-premises customers to shut down their servers after a security researcher publicly disclosed more than 30 alleged zero-day vulnerabilities, including exploits that could let attackers take over vulnerable…”
- Hackers exploit SSHole OpenSSH flaw to breach Linux systems — BleepingComputer
“GreyNoise recorded the first successful exploitation of SSHole in the wild on November 7 at 00:46 UTC, approximately 40 hours after the fix. The researchers logged 16 successful exploitation chains targeting networks protected by GreyNoise from six source IP addresses linked to…”
- Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data — The Hacker News
“Apart from the attack, most of the roles the attacker assumed were unused, according to Wiz's researchers. But each role still trusted Qubole's account, so the attacker's requests worked.”
- Fireworks AI discloses new breach after cloud provider hack — BleepingComputer
“In the new breach, the threat actors accessed resource metadata (e.g., Fireworks resource identifiers, display names, descriptions, creation time), billing information (e.g., billing and shipping addresses, invoice and payment history, account balance, and credit usage), and…”