Attackers exploited two authentication bypass flaws in N-able N-central to reach managed business endpoints. Here is what the attack looked like, and what UK businesses should ask their IT provider.