Synology has issued an urgent cybersecurity warning after ransomware operators targeted vulnerable Network Attached Storage (NAS) devices. Attackers are exploiting previously patched vulnerabilities in outdated DiskStation Manager (DSM) software, threatening business data and backup infrastructure.
The Taiwan-based storage manufacturer confirmed that cybercriminals are exploiting a security weakness addressed in December 2024. The attacks aim to encrypt sensitive information and demand ransom payments, exposing organisations that have neglected essential security updates.
Although Synology has not identified the precise vulnerability being exploited, its advisory references three security flaws: CVE-2024-10441, CVE-2024-50629 and CVE-2024-10445. The most critical carries a CVSS severity score of 9.8, indicating significant remote exploitation risks.
The C3RB3R ransomware campaign is particularly concerning. Reports indicate that compromised devices have files encrypted with the “.L0CK3D” extension. Attackers subsequently deposit ransom notes named “read-me3.txt”, demanding payment in exchange for restoring access to encrypted information.
Security researchers also identified two additional critical vulnerabilities, CVE-2026-13684 and CVE-2026-13639, patched in September 2026. Both carry severity scores of 9.8 and could potentially enable unauthorised file access, modification and denial-of-service attacks.
The broader threat extends beyond Synology. NAS devices frequently store confidential corporate documents, customer information and business backups. Successful ransomware attacks can therefore disrupt operations, compromise data availability and undermine organisational resilience.
Cybersecurity experts recommend immediately upgrading DSM, enabling automatic updates and restricting internet exposure. Organisations should strengthen administrative authentication, maintain isolated backups and continuously monitor suspicious activity to reduce ransomware risks.
The larger lesson is unmistakable: outdated infrastructure remains a gateway for cybercriminals. As enterprises increasingly depend on interconnected storage systems, cybersecurity must move beyond reactive patching towards continuous verification, proactive vulnerability management and zero-trust protection. Digital trust ultimately depends on securing every connected device.
——————————————————–
Click Here For The Original Source.
