Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw

Synology is urging customers to update their DiskStation Manager (DSM) software after ransomware attacks were observed targeting NAS devices. Threat actors are exploiting a vulnerability that was patched in December 2024, focusing on devices still running outdated DSM versions. The attacks aim to encrypt victim data and demand ransom payments. Synology has issued a public statement advising immediate updates to mitigate risk. The incident highlights the ongoing danger of unpatched network-attached storage devices exposed to the internet.