'Mirai-like' botnet observed attacking EOL Zyxel NAS devices

There are early indications of active attacks targeting end-of-life Zyxel NAS boxes just a few weeks after details of three critical vulnerabilities were made public. The Shadowserver Foundation, an internet security organization partnered with many of the world's top security agencies and vendors, said its scanners started …

[Tubz]

Or put in a vlan/firewall rules in that bans your Zyxel NAS from talking to the internet and only to locals, if you get owned, then you have bigger network problems.

[druck]

If your router has OpenVPN server support, you can configure the NAS for local network use only, but you can still access securely over your own personal VPN when away.

[pc-fluesterer.info]

Just don't make a NAS reachable from the open internet.

Just don't. That's a no-go. It is called NAS not IAS. NETWORK attached storage, not INTERNET attached storage. The latter we call cloud nowadays, and that is hard enough to protect.