Azarel Fernandes

🇹🇼 🚨 SYNOLOGY WARNS RANSOMWARE IS HITTING OUTDATED DSM NAS SYSTEMS Synology says threat actors are exploiting a vulnerability it patched in December 2024 to encrypt data and extort ransom on devices running outdated DSM versions. • The vendor urges all users on vulnerable versions to update DSM immediately and enable automatic updates • Synology points to its older advisory Synology-SA-24:20 • Separately, 360's incident responders report multiple Synology ransomware cases since early October and identify C3RB3R ransomware ⚠️ Analyst Note: No single confirmed entry route: 360 cites different September 2026 vulnerabilities, while Synology points to the Dec 2024 flaw. This is not a new zero-day, and there is no verified victim count or exfiltration scope. Older "minimum fixed" builds are not the latest DSM; follow current update guidance for your model and branch. synology.com/en-global/compa… #DDW #Ransomware #Synology #NAS #ThreatIntelligence