{
  "id": 17418383,
  "title": "PSA: Manually update your Synology NAS right now",
  "url": "https://urgent.news/2026/10/31/psa-manually-update-your-synology-nas-right-now",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-31T14:19:30.000Z",
  "source": {
    "name": "AppleInsider",
    "slug": "appleinsider",
    "url": "https://appleinsider.com/articles/26/10/31/psa-manually-update-your-synology-nas-right-now"
  },
  "original_language": "en",
  "account": "Synology NAS users are strongly advised to manually update their network storage devices immediately, particularly for older units. Recent vulnerabilities in PHP have prompted a widespread effort to patch servers globally. This issue isn't limited to commercial servers; home NAS units, including those accessible over the internet, are also at risk. The PHP fiasco serves as a stark reminder for all users to regularly update their devices, not just to protect against PHP vulnerabilities but also to guard against other existing and older security threats. While some NAS vendors provide patches to fix security issues, not all devices receive updates automatically. Users must manually check their network hardware, as sometimes the software may claim no updates are available, but important ones are hidden. This appears to be the case with some Synology users who discovered their NAS was being attacked by ransomware. Attackers exploited the PHP vulnerability to encrypt data. One Reddit report detailed a Synology DS918+ being targeted by ransomware, which was prevented by employing 3-2-1 backups. The crucial update to fix the attack was available in Update 6, released in November 2024, but the NAS was on an earlier update. Another attack on a Synology DS2422+ on October 29 saw 70TB of data encrypted in a ransomware attack. The real issue lies not in the availability of patches but in their implementation. Some hardware automatically updates, while others, including older models, may not update automatically by default. Synology's DSM manual indicates that devices from 2025 and later have automatic updates, but there's no mention of older hardware having this functionality enabled by default. This suggests older models require manual setup to update automatically. The situation is further complicated as users may see messages indicating their NAS is fully updated, when in reality automatic updates have ceased for some reason, such as an End of Life update policy. Users should regularly check their NAS units and see messages like 'You are fully updated to the latest version,' but it's recommended to verify manually from the manufacturer's support pages. AppleInsider recommends setting up a schedule to regularly check for updates, not just relying on automatic updater tools. Regular updates are crucial for securing all hardware devices, not just Apple devices. Proactive measures are always better than being too late and losing data.",
  "summary": "Synology NAS owners should take the network storage devices offline and manually update them as soon as possible, especially for older units. Synology DS420+ The discovery of vulnerabilities in PHP led to large sections of the Internet updating servers to patch the software flaws. This doesn't just affect commercial webservers, as it is also a problem for home NAS units, including those with…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}