Active Exploitation of MSP Tools, CCTV Systems and Windows VPNs
Active Exploitation of MSP Tools, CCTV Systems and Windows VPNs
This episode examines three concurrent exploitation campaigns targeting UK small business infrastructure in August 2026. First, CVE-2026-18577 in N-able N-central RMM software, which grants unauthenticated administrative access to MSP management consoles and, by extension, every client system they control. Second, Operation CameraSwarm, a coordinated campaign that compromised over 14,530 Dahua CCTV devices using five-year-old unpatched vulnerabilities and default credentials. Third, CVE-2026-33824, a critical Windows IKE…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.