For sales inquiries,
please contact us at:
sales@thecus.com

For marketing inquiries, please contact us at:
marketing@thecus.com

Tech News

2018-01-30
Important system update closes new security vulnerabilities
Bookmark and Share

01/30/2018 – Immediately after the new "Spectre" and "Meltdown" vulnerabilities leaked out early January, the developers at Thecus started to work on a solution to protect the Thecus NAS from potential attacks. Now the first security update for the ThecusOS 7.0 operating system has already been released.

Spectre and Meltdown

Over the past year, security experts from Google's Project Zero and other technicians have discovered that the “speculative execution” technique used by many of today's microchips to optimize performance by predicting the execution path of programs and scheduling typically used instructions, poses a critical security vulnerability. Malware can take advantage of this technique to get access to memory areas, e.g. with passwords or other sensitive data. The different variants of these vulnerabilities were called Spectre and Meltdown.

Affected are – among others - processors from Intel and some based on ARM architecture. Thecus is using those chips for their network storage products and has therefore now released its first firmware updates that covers the key caveats revealed by Spectre and Meltdown to eliminate the biggest security risks.

"Privacy and data security are one of the highest priorities for both Thecus and our customers. That's why we responded promptly after the risks from Spectre and Meltdown became known and are one of the first manufacturers to update their NAS with a new firmware to protect our products from potential attacks.", said Florence Shih, General Manager of Thecus.

More security updates in the works

Meltdown and parts of Spectre are virtually eliminated by the new firmware but unfortunately the current update may not be enough and Thecus continues to make its network storage more secure. More updates for Thecus NAS will follow as soon as they have been extensively tested and validated.

How to update the firmware against Spectre and Meltdown

The important update is currently available for NAS with ThecusOS 7.0 such as the N2810, N5810 and N12910 series, the N4810, N4910 and N16910SAS with Intel processors and the new N2350 and N4350 based on ARM chips.

If your NAS is connected to the Internet, you can simply update via the user interface: Inside the "Control Panel" select "Firmware Setting" and click "Check Upgrade Now".

The new beta firmware with version number 3.02.03 can also be downloaded from the Thecus website when you select your NAS model with ThecusOS 7.0.
 
More Information on ThecusOS 7.0 can be found here: thecus.com/ThecusOS7

About Thecus®
Established in 2004, Thecus Technology Corp provides market leading network attached storage and network video recorder solutions, committed to revolutionize how everyone from home user to enterprise level business centrally stores, manages and accesses their digital data both onsite and cloud-based. Thecus strives to deliver continuous innovation through cutting edge technology and design to provide data storage with the most customer-friendly platform, rapid performance and robust security. In May 2016, Thecus was formally acquired by Ennoconn Corporation and thus became part of the Foxconn IPC Technology group. Partnered together this diverse group of companies work in tandem to provide a total IoT (Internet of Things) solution. Now with an unparalleled portfolio to work with, Thecus is collaborating to bring unprecedented change to the network storage industry.

For sales inquiries, please contact us via email: sales@thecus.com 
For marketing inquiries, please contact us via email:
marketing@thecus.com