Synology NAS Ransomware Attacks Exploit Unpatched DSM Vulnerability

Synology has warned users to update DSM software after ransomware attacks exploited a previously patched vulnerability. The attacks target outdated systems to encrypt data and demand ransom.

Synology is urging customers to update the DiskStation Manager (DSM) software powering its Network Attached Storage (NAS) devices following ransomware attacks.

The Taiwanese vendor said it observed threat actors exploiting a vulnerability patched in December 2024 to target devices running outdated versions of DSM.

"These attacks aim to encrypt data and extort ransom," it said in a statement

Read original article