Researcher shares flaw, reported to Western Digital in April 2017, that bypasses admin password for WD's My Cloud NAS drives; WD says fix coming in a few weeks
and the company said patches are, to this day, still a few weeks away. https://techcrunch.com/... Svbl / @svblxyz : “Cookie: username=admin” lol. https://twitter.com/... Kevin Beaumont / @gossithedog : Over a year ago @westerndigital were notified their storage product contains an unauthenticated, trivial remote access exploit. A talk was given at last year's DEFCON, there's a Metaspolit module - *but still no fix*. https://twitter.com/...