Week of July 27, 2026

A new malware framework named VioletRAT has been observed, featuring advanced stealth techniques and botnet functionality. It employs UAC bypass, process injection into explorer.exe, and memory tampering to evade endpoint detection. The framework poses a significant threat to endpoint security by undermining EDR and antivirus defenses.

A critical vulnerability in N-able N-central allowed attackers to gain administrative control of N-central servers and managed endpoints. The initial patch (build 2026.3.1.6) was incomplete, leaving systems exploitable. Only build 2026.3.1.7 fully mitigates the issue.

Attackers are actively exploiting an authentication bypass vulnerability (CVE-2026-18577) in N-able N-central, a remote monitoring and management (RMM) platform, to gain unauthorized access to managed endpoints. This allows attackers to potentially compromise all endpoints managed by the affected N-central instance, posing a significant supply-chain-like risk.