Get the latest tech news
Zero-Click Flaw Exposes Potentially Millions of Popular Storage Devices to Attack
A vulnerability categorized as “critical” in a photo app installed by default on Synology network-attached storage devices could give attackers the ability to steal data and worse.
A popular device and application used by millions of individuals and businesses around the world to store documents is vulnerable to a zero-click flaw, a group of Dutch researchers have discovered. The vulnerability, which is called zero-click because it doesn’t require a user to click on anything to be infected, affects a photo application installed by default on popular network-attached storage (NAS) devices made by the Taiwanese firm Synology. He and colleagues Carlo Meijer, Wouter Bokslag, and Jos Wetzels conducted a scan of internet-connected devices and uncovered hundreds of thousands of Synology NASes connected online that are vulnerable to the attack.
Or read this on Wired
