The New York Department of Financial Services (“DFS”) has recently released an Industry Letter regarding a cybersecurity threat alert, applicable to all regulated entities. The key highlights are as follows:
- Threat actors are targeting a Known Exploited Vulnerability in N-central to compromise managed service providers (“MSP”) environments.
- N-central is used by some MSPs to centrally monitor, patch, and remotely access their customers’ services and endpoints (Remote Monitoring and Management services or RMM services)
- Once access is obtained, threat actors may create or register for new services, allowing continued access even after compromised N-central credentials are revoked.
- Attackers are using a compromised MSP’s environment to move into their customer’s networks and information systems with administrator network privileges.
- If N-central is used, entities should work with their service providers to assess and mitigate potential exposure, including reviewing N-central activity for evidence of unauthorized or persistent access; verifying that applicable security updates, including software patches and other threat mitigation steps, have been implemented; and evaluating whether any systems or credentials were affected.
- Entities should continue to report all Cybersecurity Incidents to DFS, including those originating at Third-Party Service Providers.
Please note that the Industry Letter was released on August 11, 2026.
For any questions related to the above referenced letter from New York, please contact Westmont Associates!