Unless you’re running your servers, devices and other items that connect to a network of some sort in a pile of concrete at the bottom of a lake (perhaps a Great Lake) disconnected from the world, it may be time to go and start checking your firmware. I know that it’s one of the most fun activities to do over a Memorial Day weekend – right?
In this case I noticed a post about something called VPNFilter over on Ars Technica – sounds nasty right? It makes mention of what software systems and devices are affected – in a particular set of QNAP devices as well as the software platform that operates QNAP devices, QTS.
For me, I quickly checked my firmware and noticed that I was not in the impacted group, but that’s not to say that you shouldn’t check your QNAP device if you’ve got one. Obviously check to make certain that you’ve got a backup of your QNAP sitting somewhere that you’re able to roll back to if you need to (I’ve never had a problem with their firmware personally).
More details are available here: https://www.qnap.com/en-us/security-advisory/nas-201805-24