QNAP Web server http https and ports

Yowza! What a mess. I knew there had been security issues in the past related to QNAP devices but thought a lot of those had been solved. Hopefully, they have begun to plug a lot of those holes. Has there been any incidents since this last one? I can now see and understand the advice!

I didn’t read all 174 pages of posts (read about 10 or 11). What was finally determined as the attack vector?