Synology is warning customers to update their DiskStation Manager (DSM) software after threat actors exploited a patched vulnerability to launch ransomware attacks, including C3RB3R ransomware, against NAS devices running outdated versions. The attacks encrypt victims' data and demand a ransom, with the critical flaw CVE-2024-10441 (CVSS 9.8) enabling remote code execution among the vulnerabilities addressed in December 2024. Synology is urging all affected users to upgrade to the latest DSM versions immediately and enable automatic updates to prevent further compromise.
