

But now, researchers at Ars Technic and Censys have found a second vulnerability in My Book Live devices that could have also been used to carry out the attacks-and it was even simpler than the first one. In addressing the mass loss of data, WD suggested that hackers had taken advantage of the known vulnerability. That hack allowed a hacker to gain root access through a firmware exploit. Initial reports suggested that the hackers had carried off the attacks using a previously known vulnerability in the devices that was not fixed because WD had ceased selling and supporting them. Unfortunately, that plan went south for My Book Live owners recently-overnight, someone hacked into their devices and deleted all their data.

Users could back up their phone, tablet or computer data automatically, making use of their own personal cloud-eliminating the need for a third-party cloud provider. My Book Live devices are a type of external hard drive that was promoted by its maker as a personal cloud device.
