Newsletter Archives
-
Got a Western Digital NAS?
I just told a coworker to unplug his WD mycloud/mybook devices. We have another zero day for the Western Digital line up.
Brian Krebs has the details.
I’m going back to plain old external hard drives as the backup media of choice these days.
-
Western Digital My Cloud customers – turn off Cloud access NOW
If you have a Western Digital My Cloud network attached storage device, you’re mightily exposed. Jon Fingas at engadget says:
Exploitee.rs has discovered a number of unpatched security flaws in most My Cloud models that let remote intruders bypass the login, insert their own commands and upload files without permission. In numerous cases, it’s a matter of poorly implemented scripts. Also, every command exectued through the web interface has full access to the operating system — an attacker would have the keys to the kingdom.
Bottom line: Everybody with Western Digital My Cloud machines should take Barb Bowman’s advice and Turn Off Cloud Access to your WD My Cloud Device NOW