CVE-2024-10441: Ransomware is encrypting Synology storage servers left without updates

Not listed so far in CISA’s catalog of actively exploited vulnerabilities.

Our analyses

Ransomware is encrypting Synology storage servers left without updates

Synology confirmed these attacks on October 29. They target devices still running an old version of DSM, their operating system. Here are the versions to install and the steps to protect your backups.

Oct 30, 20263 min read

What to do

Check whether your estate includes the affected product, including internet-facing devices.
Apply the vendor’s patch or mitigations (references below).
Watch for exploitation: this entry is updated if the vulnerability enters the exploited catalog or is the subject of a CERT-FR alert.

References

NVD entry (NIST)