Phasellus gravida dui in magna tincidunt, et hendrerit dolor fringilla. Proin finibus eu augue quis hendrerit. Fusce tempor fermentum dolor, sit amet ultrices nisi vulputate ut.
Hi @dswv42,
Our investigation of this incident has not uncovered any evidence that Western Digital cloud services, firmware update servers, or customer credentials were compromised. As the My Book Live devices can be directly exposed to the internet through port forwarding, the attackers may be able to discover vulnerable devices through port scanning. The vulnerabilities being exploited in this attack are limited to the My Book Live series, which was introduced to the market in 2010 and received a final firmware update in 2015. These vulnerabilities do not affect our current My Cloud product family.
