Precursor Intelligence

Threat News

Latest cyber threat intelligence, breaches and exploitation

1 matching story

MSP
  • Ransomware Incident24d ago·6 sources

    StormEncryptor ransomware deployed via N-central auth-bypass CVE-2026-18577

    A former Medusa affiliate (Storm-1175) is actively deploying StormEncryptor ransomware through an incomplete patch for CVE-2026-18556 in N-able N-central, allowing unauthenticated remote attackers to bypass authentication and take over the RMM server to reach managed endpoints.

    N-able N-centralCVE-2026-18577StormEncryptor+2
    StormEncryptor ransomware deployed via N-central auth-bypass CVE-2026-18577