The Bottom Line Upfront

The Shadowserver Foundation has issued a dire warning regarding active attacks on end-of-life Zyxel Network-Attached Storage (NAS) devices. The warning comes just weeks after patches for firmware vulnerabilities of Zyxel were released.

The Breakdown

  • These assaults, following the recent disclosure of three severe vulnerabilities, have resulted in numerous compromised systems and underscore the pressing need for immediate action.
  • Zyxel NAS devices are widespread in home and small business environments.
  • They hold sensitive data that is vulnerable to exploitation by threats like ransomware or botnets.
  • A Mirai-like botnet exploits these critical flaws to execute remote commands on affected devices.
  • The disclosed vulnerabilities include high-severity issues such as command injection flaws patched in June 2023.
  • Owners must urgently apply available patches or upgrade their hardware.
  • Failure to act leaves systems open to attackers seeking easy targets among outdated and unpatched devices.
  • Proactive cybersecurity measures are essential as aging networked storage solutions become prime targets for sophisticated cyberattacks. Ensuring timely updates can mitigate risks posed by these evolving threats.