On 2 November 2026 Synology warned that actors are exploiting a flaw patched in December 2024 on outdated DSM versions to encrypt NAS data with C3RB3R ransomware (.L0CK3D extension, read-me3.txt note). It urges immediate DSM upgrades to fixed builds (for example 7.2.2-72806-1 or later), enabling automatic updates and blocking the management interface from the public internet.

What it means: For Greek SMEs and offices using Synology NAS for backup or file share, immediately check DSM version and WAN exposure of management. Apply 3-2-1 offline/immutable backups; do not pay ransoms. If compromise is suspected, isolate the device and follow forensics before restore. Lagging on 2024 patches is the core risk factor. In practice, teams should name an owner, update the risk register and agree success criteria within 30 days. Where suppliers or customers are affected, send a short note citing the primary source without overclaiming. Compliance, security and operations are linked; one change often needs contract, access-rights and continuity checks. Keep a review calendar so the news becomes concrete actions for the Greek business. In practice, teams should name an owner, update the risk register and agree success criteria within 30 days. Where suppliers or customers are affected, send a short note citing the primary source without overclaiming. Compliance, security and operations are linked; one change often needs contract, access-rights and continuity checks. Keep a review calendar so the news becomes concrete actions for the Greek business.

Read the original on BleepingComputer / Synology

Related service: Custom software

Related stories