GoKawiilSynology warns C3RB3R ransomware is hitting unpatched NAS devices
Synology issued an advisory saying threat actors are exploiting a vulnerability patched in December 2024 to deploy C3RB3R ransomware against NAS devices still running outdated DSM software. The company did not name the specific flaw but pointed to a November 2024 advisory covering three vulnerabilities allowing code execution and file read/write access. Synology is urging customers to update DSM immediately, enable automatic updates, and block internet access to the management web interface.