{
  "story_id": "d58c55260642432e9a38c21ef9ed6bd3",
  "desk": "bad-news-beat",
  "revision": 1,
  "published_at": "2026-11-12T01:54:55.192Z",
  "content_hash": "e22c1bb67be4c34654a95574b99a013e3190100e2dd3e5d41b36965ab178afb2",
  "hash_basis": "sha256 over `headline\\ndek\\nprose`, plus `\\n` + the canonical citations JSON when any source is placed, plus `\\n#blog` for blogs",
  "basis": {
    "headline": "N-able takes its remote management service offline after 30 zero-days are published",
    "dek": "A researcher posted working exploits, saying earlier reports were ignored. Customers who host the software themselves were told to shut their servers down. There is no date for a return.",
    "prose": "N-able took its hosted N-central environments offline.[^1] It urged customers who run N-central on their own premises to shut down their servers.[^2]\n\nN-central is a remote monitoring and management platform.[^3] It is the kind of software an IT provider uses to reach into its clients' machines, which is why flaws in it matter beyond the company that makes it.\n\n## What was published\n\nA researcher disclosed more than 30 alleged zero-day vulnerabilities in N-central.[^4] He published proof-of-concept exploits in a GitHub repository called Able2Shell.[^5] The flaws include remote code execution and authentication bypass.[^6]\n\nThe two reports give the researcher's first name differently. BleepingComputer calls him Sean Bales. TechCrunch calls him Ben Bales.[^7]\n\n## Why he published\n\nBales claimed N-able ignored vulnerability reports he had submitted before.[^8] He released the bugs after the company allegedly failed to patch flaws reported earlier.[^9] That is his account. Neither report carries N-able's answer to it.\n\n## What N-able says\n\nN-able said no successful exploitation of the bugs has been confirmed.[^10] It had observed no active exploitation as of 9 November.[^11] It confirmed it was developing a hotfix.[^12]\n\n## The outage\n\nN-able had not set a timeline for restoring the service.[^13]",
    "cited": "[{\"statement\":\"N-able took its hosted N-central environments offline.\",\"source\":\"bleepingcomputer.com\",\"instrument\":\"\",\"claim_key\":\"doc:page-html-126819:0\",\"url\":\"https://www.bleepingcomputer.com/news/security/n-able-takes-cloud-platform-offline-after-30-plus-zero-days-published/\"},{\"statement\":\"N-able urged on-premises N-central customers to shut down servers.\",\"source\":\"bleepingcomputer.com\",\"instrument\":\"\",\"claim_key\":\"doc:page-html-126819:1\",\"url\":\"https://www.bleepingcomputer.com/news/security/n-able-takes-cloud-platform-offline-after-30-plus-zero-days-published/\"},{\"statement\":\"N-central is a remote monitoring and management platform.\",\"source\":\"bleepingcomputer.com\",\"instrument\":\"\",\"claim_key\":\"doc:page-html-126819:4\",\"url\":\"https://www.bleepingcomputer.com/news/security/n-able-takes-cloud-platform-offline-after-30-plus-zero-days-published/\"},{\"statement\":\"Sean Bales disclosed over 30 alleged N-central zero-day vulnerabilities.\",\"source\":\"bleepingcomputer.com\",\"instrument\":\"\",\"claim_key\":\"doc:page-html-126819:2\",\"url\":\"https://www.bleepingcomputer.com/news/security/n-able-takes-cloud-platform-offline-after-30-plus-zero-days-published/\"},{\"statement\":\"Sean Bales published proof-of-concept exploits in the Able2Shell GitHub repository.\",\"source\":\"bleepingcomputer.com\",\"instrument\":\"\",\"claim_key\":\"doc:page-html-126819:3\",\"url\":\"https://www.bleepingcomputer.com/news/security/n-able-takes-cloud-platform-offline-after-30-plus-zero-days-published/\"},{\"statement\":\"Disclosed flaws include remote code execution and authentication bypass vulnerabilities.\",\"source\":\"bleepingcomputer.com\",\"instrument\":\"\",\"claim_key\":\"doc:page-html-126819:5\",\"url\":\"https://www.bleepingcomputer.com/news/security/n-able-takes-cloud-platform-offline-after-30-plus-zero-days-published/\"},{\"statement\":\"Researcher Ben Bales published dozens of N-Central zero-day bugs on GitHub.\",\"source\":\"techcrunch.com\",\"instrument\":\"\",\"claim_key\":\"doc:page-html-203287:2\",\"url\":\"https://techcrunch.com/2026/11/10/n-able-takes-its-remote-access-service-offline-after-researcher-publishes-dozens-of-zero-day-bugs/\"},{\"statement\":\"Sean Bales claimed N-able ignored prior vulnerability reports he submitted.\",\"source\":\"bleepingcomputer.com\",\"instrument\":\"\",\"claim_key\":\"doc:page-html-126819:6\",\"url\":\"https://www.bleepingcomputer.com/news/security/n-able-takes-cloud-platform-offline-after-30-plus-zero-days-published/\"},{\"statement\":\"Ben Bales released the bugs after N-able allegedly failed to patch earlier reported flaws.\",\"source\":\"techcrunch.com\",\"instrument\":\"\",\"claim_key\":\"doc:page-html-203287:4\",\"url\":\"https://techcrunch.com/2026/11/10/n-able-takes-its-remote-access-service-offline-after-researcher-publishes-dozens-of-zero-day-bugs/\"},{\"statement\":\"N-able states no successful exploitation of the bugs has been confirmed.\",\"source\":\"techcrunch.com\",\"instrument\":\"\",\"claim_key\":\"doc:page-html-203287:3\",\"url\":\"https://techcrunch.com/2026/11/10/n-able-takes-its-remote-access-service-offline-after-researcher-publishes-dozens-of-zero-day-bugs/\"},{\"statement\":\"N-able reported no active exploitation was observed as of November 9 2026.\",\"source\":\"bleepingcomputer.com\",\"instrument\":\"\",\"claim_key\":\"doc:page-html-126819:8\",\"url\":\"https://www.bleepingcomputer.com/news/security/n-able-takes-cloud-platform-offline-after-30-plus-zero-days-published/\"},{\"statement\":\"N-able confirmed it was developing a hotfix for the vulnerabilities.\",\"source\":\"bleepingcomputer.com\",\"instrument\":\"\",\"claim_key\":\"doc:page-html-126819:7\",\"url\":\"https://www.bleepingcomputer.com/news/security/n-able-takes-cloud-platform-offline-after-30-plus-zero-days-published/\"},{\"statement\":\"N-able had not set a timeline for restoring N-central service.\",\"source\":\"bleepingcomputer.com\",\"instrument\":\"\",\"claim_key\":\"doc:page-html-126819:9\",\"url\":\"https://www.bleepingcomputer.com/news/security/n-able-takes-cloud-platform-offline-after-30-plus-zero-days-published/\"}]",
    "kind": "news"
  },
  "receipt_verify": "Ed25519 over the dot-joined string `slice_hash.cursor_from.cursor_to.view.view_version.row_count`; public_key and sig are base64url of the raw 32-byte key / 64-byte signature",
  "receipt": {
    "slice_hash": "58a38417180e9b0717b6cf7e18c68deb1ec6aeb1c0534263bb97a9f0c118b7a4",
    "cursor_from": "ingest:raw_newsroomfloor.stories:58a38417180e9b07",
    "cursor_to": "ingest:raw_newsroomfloor.stories:58a38417180e9b07",
    "view": "ingest:raw_newsroomfloor.stories",
    "view_version": "1",
    "row_count": 1,
    "hash_basis": "sha256 over the JSON array of {insertId, json} rows as received (normalized wire shape), computed before the BigQuery forward",
    "credits": 0.01,
    "price_per_100_rows_written": 1,
    "sig": "7ZiEr1xV7ROkD5lfB_PJp_sKaQdAR601tx9fC-t1fTvbhgyeRKG83GFhqS4UoQivjqOg3bLViKctLsZ6Ac7NDA",
    "public_key": "bMUigy8O0jOnBxQ4Sc-5lwhIZ8LQVAhxMbR7qESVuUE",
    "signer_path": "lakehouse/data-extract/v1",
    "alg": "Ed25519",
    "signed": true
  },
  "receipt_note": "the ingest door's signed receipt for this revision, verbatim as the door returned it",
  "generation_chain": "written by a human-directed session at the desk; the revision trail is that record",
  "cited_facts": [
    {
      "n": 1,
      "statement": "N-able took its hosted N-central environments offline.",
      "source": "bleepingcomputer.com",
      "instrument": "",
      "claim_key": "doc:page-html-126819:0",
      "occurred_at": null,
      "published_at": null
    },
    {
      "n": 2,
      "statement": "N-able urged on-premises N-central customers to shut down servers.",
      "source": "bleepingcomputer.com",
      "instrument": "",
      "claim_key": "doc:page-html-126819:1",
      "occurred_at": null,
      "published_at": null
    },
    {
      "n": 3,
      "statement": "N-central is a remote monitoring and management platform.",
      "source": "bleepingcomputer.com",
      "instrument": "",
      "claim_key": "doc:page-html-126819:4",
      "occurred_at": null,
      "published_at": null
    },
    {
      "n": 4,
      "statement": "Sean Bales disclosed over 30 alleged N-central zero-day vulnerabilities.",
      "source": "bleepingcomputer.com",
      "instrument": "",
      "claim_key": "doc:page-html-126819:2",
      "occurred_at": null,
      "published_at": null
    },
    {
      "n": 5,
      "statement": "Sean Bales published proof-of-concept exploits in the Able2Shell GitHub repository.",
      "source": "bleepingcomputer.com",
      "instrument": "",
      "claim_key": "doc:page-html-126819:3",
      "occurred_at": null,
      "published_at": null
    },
    {
      "n": 6,
      "statement": "Disclosed flaws include remote code execution and authentication bypass vulnerabilities.",
      "source": "bleepingcomputer.com",
      "instrument": "",
      "claim_key": "doc:page-html-126819:5",
      "occurred_at": null,
      "published_at": null
    },
    {
      "n": 7,
      "statement": "Researcher Ben Bales published dozens of N-Central zero-day bugs on GitHub.",
      "source": "techcrunch.com",
      "instrument": "",
      "claim_key": "doc:page-html-203287:2",
      "occurred_at": null,
      "published_at": null
    },
    {
      "n": 8,
      "statement": "Sean Bales claimed N-able ignored prior vulnerability reports he submitted.",
      "source": "bleepingcomputer.com",
      "instrument": "",
      "claim_key": "doc:page-html-126819:6",
      "occurred_at": null,
      "published_at": null
    },
    {
      "n": 9,
      "statement": "Ben Bales released the bugs after N-able allegedly failed to patch earlier reported flaws.",
      "source": "techcrunch.com",
      "instrument": "",
      "claim_key": "doc:page-html-203287:4",
      "occurred_at": null,
      "published_at": null
    },
    {
      "n": 10,
      "statement": "N-able states no successful exploitation of the bugs has been confirmed.",
      "source": "techcrunch.com",
      "instrument": "",
      "claim_key": "doc:page-html-203287:3",
      "occurred_at": null,
      "published_at": null
    },
    {
      "n": 11,
      "statement": "N-able reported no active exploitation was observed as of November 9 2026.",
      "source": "bleepingcomputer.com",
      "instrument": "",
      "claim_key": "doc:page-html-126819:8",
      "occurred_at": null,
      "published_at": null
    },
    {
      "n": 12,
      "statement": "N-able confirmed it was developing a hotfix for the vulnerabilities.",
      "source": "bleepingcomputer.com",
      "instrument": "",
      "claim_key": "doc:page-html-126819:7",
      "occurred_at": null,
      "published_at": null
    },
    {
      "n": 13,
      "statement": "N-able had not set a timeline for restoring N-central service.",
      "source": "bleepingcomputer.com",
      "instrument": "",
      "claim_key": "doc:page-html-126819:9",
      "occurred_at": null,
      "published_at": null
    }
  ],
  "note": "A signature proves who filed this and that it has not changed since. It never makes a claim true. The dates on cited_facts (occurred_at, published_at) are the forge's, joined at read time; they are not part of the signed basis above."
}