QNAP Newsroom

Dear Users,

As a new year is around the corner, many people have started to arrange their holidays. However, the QNAP security team found that information security attacks often occur during long holidays. Therefore, QNAP suggests you to examine the security settings of NAS and to update NAS to the latest available version. Enjoy the holiday season without a worry!

More Robust Automatic Update Function

In QTS 5.0.1 / QuTS hero 5.0.1, QNAP has improved the auto update function of firmware. Twelve hours prior to the implement of auto update, you will receive a notification from the system, allowing you to choose to delay or cancel the update to avoid interrupting the service in unexpected condition.

• During the period of auto update, all the ongoing tasks are pending. However, if there’s any real-time iSCSI or connection in fiber channel in the device, or the implementation of virtual machine in Virtualization Station, the device won’t automatically update the firmware to avoid any data loss. Please arrange an appropriate time to correctly disconnect iSCSI or that in fiber channel, or deactivate the virtual machine in Virtualization Station, and then implement the firmware update manually.

You can carry out the following adjustments in the “settings of firmware update” by Control Panel -> System -> Firmware Update.

• Select “Auto Update”.
• Select “Secure Updates” and “Quality Updates” of the “Type of Firmware Update”.
• Press the button “Apply” to activate the change of settings.

In the future, you won’t miss any firmware safety update released by QNAP anymore.

The Latest Safety Update

QNAP has released the latest safety improvement update to the latest version QTS 5.0.1.2248 build 20221215 and QuTS hero h5.0.1.2248 build 20221215. If the function of auto firmware update has been activated in your QNAP NAS, the system will arrange to install the relevant firmware based on the schedule to elevate QNAP NAS’ capabilities of resistant against malicious attacks.

Avoid the Exposure of NAS in the Internet

QNAP Product Security Incident Response Team (QNAP PSIRT) discovered that it has been proven to be a successful security strategy to avoid exposing NAS devices in the Internet and to regularly update the firmware and applications.

Please click the following link, and complete the NAS security protection according to the guidelines of the latest QNAP Information Security Manual.
https://view.publitas.com/qnap-1/2022_security_guide_en/page/1

Contact the response team of information security incidents of QNAP products
psirt@qnap.com