Cybersecurity Brief - 2026-09-07

• N-able Issues Critical Unauthenticated RCE Vulnerability in N-central N-able has released a maximum-severity hotfix (CVE-2026-86218, CVSS 10.0) for its N-central RMM platform to address a pre-authentication remote code execution flaw. While N-able's release notes suggest no confirmed exploitation, their incident notice states the flaw has been observed being exploited in the wild. Administrators are urged to upgrade immediately to version 2026.3.1.14. (Source: The Hacker News)

• FBI Investigating Massive Identity Theft Service Selling 153M+ Driver's Licenses The FBI has launched an inquiry into a dark web service named "Nexus" that is advertising digital scans of over 153 million driver's licenses from the US and Canada. The data appears to be sourced from a breach of a major identity verification company, with investigators tracking ongoing exfiltration of fresh records. (Source: Krebs on Security)

• Attackers Exploiting MikroTik Routers via Internet-Exposed SSH CERT Polska has issued a warning regarding attackers hijacking MikroTik routers by exploiting the Secure Shell (SSH) service accessible from the internet. The attacks, which allow for full administrative control without authentication, have been observed since at least early September 2026. Users are advised to apply official RouterOS updates and audit firewall configurations immediately. (Source: The Hacker News)