QNap addresses Critical Vulnerability
Qnap releases updates to address a critical vulnerability, tracked as CVE-2022-27596 with a CVSS v3 score: 9.8, that affects QNAP NAS devices. A remote attacker can exploit the vulnerability to…
Raspberry Robin found attacking QNAP devices
Raspberry Robin found using malicious code of Windows Installer to reach out to QNAP-associated domains and download a malicious DLL. The malware uses TOR exit nodes as a backup C2…
Checkmate Ransomware targets QNAP NAS
QNAP is warning of a of new ransomware dubbed Checkmate targeting its NAS devices using weak passwords. Threat actors are targeting devices exposed online with the SMB service enabled, they…
QNAP RCE Bug Patched
QNAP has warned its customers earlier this week that some of its NAS devices with non-default configurations are vulnerable to attacks that would exploit a three-year-old critical PHP vulnerability allowing…
QNAP Devices are under Ransomware Threat
Researchers are warning of a new wave of ech0raix ransomware attacks targeting QNAP Network Attached Storage (NAS) devices based on the sample file submissions on the ID ransomware platform. The…
QNAP Addressed Vulnerabilities in QVR systems
QNAP has addressed multiple vulnerabilities, in its products, tracked as CVE-2022-27588 with CVSS 9.8 that could be exploited by a remote attacker to execute arbitrary commands on vulnerable QVR systems. QNAP…
Netatalk Vulnerability in Multiple NAS Devices
Users of Synology and QNAP NAS devices are advised to be on the lookout for patches for several critical vulnerabilities affecting Netatalk, an open-source implemention of the Apple Filing Protocol (AFP)…
Dirty Pipe Reaches QNAP Devices
QNAP warns most of its NAS devices are impacted by the recently discovered Linux vulnerability ‘Dirty Pipe.’. By exploiting this vulnerability an attacker can gain root access. The Dirty Pipe…