Synology boosts global security with Pwn2Own Ireland 2025 role

Synology has announced its participation in Pwn2Own Ireland 2025 as part of its ongoing focus on product security and collaboration with security researchers worldwide.

The company expressed appreciation for those who have contributed to strengthening the security of Synology users' data, highlighting its continued commitment to secure and reliable data management for a global user base.

Security approach

Hanen Lin, Manager of Infrastructure Division at Synology, stated, "Security isn't a one-time feature; it's a continuous responsibility. By engaging directly with security researchers at Pwn2Own, we encourage responsible disclosure and strengthen the security of our products."

Since 2015, Synology has participated in international cybersecurity initiatives. Through these efforts, it has worked with global researchers to identify and address potential product vulnerabilities before they could be exploited. This proactive collaboration is aimed at increasing the security of Synology's products and safeguarding user data.

Collaborative effort

"Synology acknowledges and thanks security researchers from Summoning Team, Synacktiv, and Verichains Cyber Force, as well as independent researchers and the event organisers, for their contributions. Synology has begun validating the reported issues and will roll out security updates to systems with automatic updates enabled. Users are advised to keep their systems up to date to maintain optimal data security and reliability."

The company emphasised its intention to continue issuing security updates as vulnerabilities are validated and addressed, particularly for those systems that have automatic updates enabled. Synology also advised its users to ensure their systems are kept up to date in order to maintain optimal data security and reliability.

Bug bounty programme

Synology's approach to product security extends beyond individual events, incorporating ongoing schemes such as its Security Bug Bounty Programme. This initiative invites security researchers worldwide to report vulnerabilities they identify in Synology products in a responsible manner. The programme includes clear guidelines and a system of rewards, aiming to foster continuous collaboration and further strengthen the security across the Synology ecosystem.

The Bug Bounty Programmeme reflects the company's strategy to use external input and oversight as part of its product development and maintenance cycle.