Zero-Click Flaw Exposes Potentially Millions of Popular Storage Devices to Attack

Quick Summary:

A vulnerability categorized as "critical” in a photo app installed by default on Synology network-attached storage devices could give attackers the ability to steal data and worse.

They even found ones owned by maintenance contractors in South Korea, Italy, and Canada that work on power grids and in the pharmaceutical and chemical industries.“These are firms that store corporate data … management documents, engineering documents and, in the case of law firms, maybe case files,” Wetzels notes.

The researchers say ransomware and data theft aren’t the only concern with these devices—attackers could also turn infected systems into a botnet to service and conceal other hacking operations, such as a massive botnet that Volt Typhoon hackers from China had built from infected home and office routers to conceal their espionage operations.

---

More Pictures

---

Read Quick SummarySave Time

or

Article Details

Author / Journalist: Kim Zetter

Category: TechnologyEconomy

Markets: United StatesAustraliaCanadaChinaFranceIrelandIsraelItalySouth KoreaMaliNetherlandsTaiwanVenezuela

Topics: Security Security / Security News Security / Cyberattacks and Hacks

Source Website Secure: Yes (HTTPS)

News Sentiment: Negative

Fact Checked: Legitimate

Article Type: News Report

Published On: 2024-11-01 @ 10:00:00 (11 hours ago)

News Timezone: GMT +8:00

News Source URL: wired.com

Language: English

Article Length: 1354 words

Reading Time: 8 minutes read

Sentences: 54 lines

Sentence Length: 26 words per sentence (average)

Platforms: Desktop Web, Mobile Web, iOS App, Android App

Copyright Owner: © Wired

News ID: 23363101

View Article Analysis

About Wired

Main Topics: TechnologyEconomy

Official Website: wired.com

Update Frequency: 15 posts per day

Year Established: 1993

Headquarters: United States

News Last Updated: 9 hours ago

Coverage Areas: United States

Ownership: Independent Company

Publication Timezone: GMT +8:00

Content Availability: Worldwide

News Language: English

RSS Feed: Available (XML)

API Access: Available (JSON, REST)

Website Security: Secure (HTTPS)

Publisher ID: #111

Publisher Details

Frequently Asked Questions