Another WesternDigital MyCloud authentication bypass


Just saw this. Evidently there is no patch yet


That’s crazy they gave them 17 months before releasing it.


Since they published the full details, I expect all of these to be mining monero in a few days. I noticed that they mentioned a second group also found it independently, so lots of people attacking these types of devices.

Throw in the latest Kodi plugin malware/mining mess:

It’s been a tough week.


Yeah anyone using one better shut off 80/443 access to the internet.