Synology says its DiskStation Manager (DSM)-powered NAS devices are being targeted by ransomware attacks, and it is urging customers to update immediately. Multiple outlets report a recent wave of incidents aimed at encrypting data and demanding payment.
The company attributes the activity to threat actors exploiting a flaw that had been patched earlier, with coverage describing attacks aimed at devices still running older DSM versions. TechRadar frames the story broadly as a ransomware threat affecting Synology NAS hardware, while The Hacker News specifies that the attacks take advantage of a vulnerability patched in December 2024 and characterizes the goal as encryption and extortion. Bleeping Computer similarly highlights the surge and emphasizes the need for prompt software updates.
Across outlets, the common thread is Synology’s instruction to update DSM to reduce exposure. The reporting largely centers on the type and purpose of the attacks (ransomware targeting stored data) and Synology’s role in warning customers, with differences mainly in how the ransomware is described and how much technical specificity is included.
