Vulnerabilities · 1h ago
Synology says attackers are using a vulnerability patched in December 2024 to target NAS devices running outdated DiskStation Manager (DSM), but has not identified which of three flaws in its November advisory is involved. The company says the attacks aim to encrypt data and extort ransom. The Hacker News reports that customers have also described C3RB3R infections.
Synology’s advisory lists fixes across five DSM branches, from 6.2 through 7.2.2, but does not tie the attacks to a specific vulnerability. Treating one listed flaw as the answer may leave devices on outdated branches exposed; reporting does not establish whether backups or connected systems were reached.
For organizations or households with shared files on a NAS, encryption can interrupt access to those files. The relevant boundary is the fixed DSM release for each branch, while the attack’s reach beyond the device remains unknown.
2 sources covering this story
Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw
Synology warns of ransomware attacks exploiting a patched DSM flaw as NAS users report C3RB3R infections and encrypted files.
Synology warns of C3RB3R ransomware attacks targeting NAS devices
Taiwanese network-attached storage (NAS) appliance maker Synology warned customers to update their devices immediately due to a surge in C3RB3r ransomware attacks.
Part of the PlainSec briefing for 2026-11-03