Another day, another bypassed login.

China-linked group Storm-1175 has gracefully upgraded to a shiny new ransomware called StormEncryptor, proving once again that attackers work far faster than our patching schedules. The intruders allegedly waltzed into target networks by exploiting CVE-2026-18577, a delightful authentication bypass flaw in N-able N-central, before sprinting to full encryption in under twenty-four hours. System administrators running N-central might consider protecting their estate by patching the unauthenticated hole and shutting down lateral movement, assuming anyone remembers to apply patches.