Rubrik hosts on-premises NAS backups in isolated immutable vaults
NAS Cloud Direct stores backups on a separate identity domain with retention lock and anomaly detection on every backup.
Stories per day · 30 days
2 RSS
Relatedsynology4qnap3c3rb3r2plex2backup1dsm1encryption1format-string1freebsd1immutable-storage1kev1plex2shell1ransomware1ransomware-recovery1rce1rubrik1rust1syslog1
11 stories, newest first · one card per story
Stories tagged #nas
QNAP says Plex2Shell flaws are used to compromise NAS devices
Users should move Plex Media Server to 1.43.3.10861 or later; exposed 1.43.2 installs may need a clean reinstall.
ZKeys enables unattended reboots for encrypted disks
ZKeys stores half of each encryption passphrase off-site and requires periodic keepalive messages to keep keys unlocked.
Synology warns ransomware hits NAS devices on outdated DSM
Attackers exploit a flaw patched in December 2024; Synology has not said which of three CVEs is used.
Synology NAS devices targeted in ransomware attacks
Threat actors exploit a patched DSM flaw to encrypt data on unupdated Synology NAS devices using C3RB3R ransomware.
Synology NAS hit by C3RB3R ransomware using 2024 flaws
C3RB3R ransomware encrypts files with .L0CK3D extension on Synology DSM devices after exploitation of 2024 vulnerabilities
Synology warns of C3RB3R ransomware attacks on NAS devices
C3RB3R ransomware exploits unpatched DSM vulnerabilities to encrypt data on Synology NAS devices; users urged to update immediately.
ZDI-26-776: QNAP TS-453E syslog log_message Format String Remote Code Execution Vulnerability
ZDI disclosed an unauthenticated format-string bug in QNAP TS-453E syslog enabling network-adjacent code execution.
[0day-rubbish] Asustor ADM 3.5.9.RWM1 (AS602T) music.cgi act=live stored-filename command injection reaching system() (8.8 primary, PR:L)
Researchers disclosed command injection in Asustor ADM 3.5.9 music.cgi on the AS602T, rated 8.8.
Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws
Plex patched multiple undisclosed flaws in Media Server 1.43.3 and Desktop 1.115.0, urging all users to update immediately.
1
[remote] D-Link DNS_340L - OS Command Injection
An OS command injection exploit was published for the D-Link DNS-340L NAS, a flaw relevant to exposed network storage devices.