https://cybersecuritytracker.ai/?stack=1Stories and vulnerabilities involving Synology.Sat, 12 Sep 2026 21:30:27 GMThttps://helpnetsecurity.com/2026/09/04/synology-activeprotect-manager-2-0-data-protectioncst-5702Synology released ActiveProtect Manager 2.0, an update to its data protection appliances that expands platform support, adds cross-platform recovery capabilities, and strengthens security measures. The release roadmap includes future versions with artificial intelligence (AI)-driven threat mitigation features. Sources: Help Net Security.Fri, 04 Sep 2026 12:19:50 GMThttps://bleepingcomputer.com/news/security/australia-arrests-alleged-teampcp-hackers-behind-supply-chain-attackscst-5216Australian authorities arrested and charged two individuals allegedly linked to TeamPCP, a hacking group responsible for developer supply chain attacks. The operation targeted the software development ecosystem to gain broad access to downstream users and systems. Grouped because: title similarity 98 Sources: BleepingComputer, The Hacker News, SecurityWeek, The Record, KrebsOnSecurity, DataBreaches.net, CyberScoop, Help Net Security, TechCrunch Security, Risky Business News, Ars Technica Security.Thu, 27 Aug 2026 13:31:13 GMThttps://volexity.com/blog/2026/06/04/verdantbamboo-just-another-brickstorm-in-the-firewallcst-2103Volexity investigated a compromise of an Egnyte Storage Sync system that revealed a Chinese threat actor tracked as VerdantBamboo (also known as WARP PANDA, UNC5221) had maintained access for at least 18 months using the BRICKSTORM backdoor. The actor used the compromised appliance to proxy traffic and evade conditional access policies to reach the victim's Microsoft 365 environment, and later returned with stolen firewall credentials to deploy additional malware. Investigation uncovered that the victim's managed services provider had also been compromised via a BSD variant of BRICKSTORM on its pfSense firewall, likely serving as the initial infection vector. Sources: Volexity.Thu, 04 Jun 2026 20:23:55 GMT