Threat actors exploit Plex2Shell chain to install crypto miners and proxy backdoors

A chain of four vulnerabilities in Plex Media Server, dubbed Plex2Shell, is being weaponized to deliver cryptocurrency miners and reverse proxy software. Researchers observed exploitation within hours of a proof‑of‑concept disclosure, prompting warnings to patch unpatched boxes.

Why it matters: Plex server operators must apply patches immediately to prevent their systems from being hijacked for mining or proxy services.

More in Security

Security8h ago3 sources

Rank Math PRO WordPress plugin compromised in supply-chain attack

BleepingComputer + 2 more

Security9h ago3 sources

ConnectWise suspends Cloud Backup service after confirming unauthorized access