News
ai Making the internet better for AI agents might make it worse for everyone else - MIT Technology Review cybersecurity Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks - SecurityWeek ai “We were looking at it wrong”: The explosive claim that’s upended the AI world - MIT Technology Review cybersecurity Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor - The Hacker News cybersecurity OpenCode hack exposes API keys amid AI distillation attacks - BleepingComputer cybersecurity Weekly Cybersecurity Newsletter — Top 50 Cybersecurity Stories of the Week - CyberPress threat-intel Bright Security Introduces STAR Fuzzer, Agentic Fuzzing That Writes Its Own Harnesses and Proves Every Finding - GBHackers cybersecurity Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor - The Hacker News cybersecurity WhatsApp Help Pages Leaked Hidden Instructions for a Meta Chatbot - Wired Security vulnerability Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED) - Rapid7 Vulnerability Disclosure cybersecurity Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw - SecurityWeek cybersecurity Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack - SecurityWeek threat-intel Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779 - Rapid7 Emergent Threat Response threat-intel Supply Chain Zero Days: Closing the Gap Between Publication and Detection - Wiz Research threat-intel CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild - Rapid7 Emergent Threat Response
1 / 15
All news ›
Cybersecurity

Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor

The Hacker News ·

Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a proof-of-concept (PoC) went public. According to a researcher who goes by the online alias boredhackerblog, the exploitation activity involves chaining four different vulnerabilities, collectively called Plex2Shell. The vulnerabilities

Continue on The Hacker News ↗ ‹ All news Get the newsletter

The summary and image come from The Hacker News; the image is shown from their website.