N-able warns of N-central auth bypass flaw exploited in attacks

BleepingComputer security feed covering active exploitation of an N-able N-central authentication bypass (CVE-2026-18577), major data breaches and leaks, Android malware commercialization, cryptocurrency theft, critical Rails Active Storage vulnerabilities, software supply-chain compromises, attacks on water-utility PLCs, AI-assisted cyberattacks, and malicious package activity. The most urgent items are the actively exploited N-central flaw, critical Rails issue with potential unauthenticated RCE, and attacks against internet-exposed industrial control systems.