Qnap Strengthens Product Security through Collaboration with Trend Micro’s Zero Day Initiative

QNAP Systems, Inc. is committed to enhancing the security of its products by engaging in international collaborations.

Recently, the company participated in the Pwn2Own Toronto 2023 competition organized by Trend Micro, Inc.’s Zero Day Initiative (ZDI), resulting in valuable experiences and achievements. It will continue to deepen its cooperation with international cybersecurity organizations to continuously improve product security, ensuring the best protection for users’ data.

Pwn2Own is a global cybersecurity competition organized by ZDI aimed at challenging security vulnerabilities in various software and hardware. Participants utilize various techniques, including exploit and zero-day attacks, to breach target systems. This competition not only provides a platform for security experts to showcase their skills but also enables vendors to understand and address security vulnerabilities in their products, benefiting users WW.

The company’s Product Security Incident Response Team (PSIRT) participated in the Pwn2Own 2023 review meeting, confirming weaknesses revealed by participants in the company’s products. Subsequently, the firm promptly initiated remediation efforts and released updated versions of its NAS OS, enabling users to complete the updates.

The company expresses gratitude to the Zero Day Initiative for organizing the Pwn2Own event, which provides a platform for promoting cybersecurity communication and collaboration. Special thanks are extended to Kholoud Altookhy, Rebecca MacKenzie, Mai Mostafa, and Jimmy Calderon of the ZDI Program Operations team for their assistance and contributions in coordinating the disclosure process between ZDI and the firm’s security incident response team. The company also expresses gratitude to the research community for their hard work and dedication to protecting our customers.

Stanley Huang, senior manager, product security incident response team, QNAP, stated: “In the future, QNAP will actively participate in similar events and become sponsors to further promote the development of cybersecurity, providing users with more secure and reliable products and services.”

Pwn2Own 2023 related QNAP security patches:

• Title: Multiple Vulnerabilities in QTS, QuTS hero, and QuTScloud (PWN2OWN 2023)

• Title: Multiple Vulnerabilities in QTS, QuTS hero, QuTScloud, myQNAPcloud, and myQNAPcloud Link (PWN2OWN 2023)