[MZ-25-03] INSTAR 2K+ and 4K Series

ID: MZ-25-03

Release: August 12, 2025

Credits: Michael Imfeld

The full disclosure report can be found here.

Other News

DISCLOSURE
When Backups Open Backdoors: Accessing Sensitive Cloud Data via "Synology Active Backup for Microsoft 365"
June 27, 2025
A credential leaked by Synology allowed anyone unauthorized access to sensitive data of all Microsoft cloud tenants using “Active Backup for Microsoft 365” (ABM).

ADVISORY
[MZ-25-02] Synology Active Backup for Microsoft 365
June 27, 2025
SynoOauth leaked credentials allowing unauthorized access to Microsoft Entra tenants using “Active Backup for Microsoft 365” (ABM)