Plex2Shell Exploited Against QNAP NAS Users

By Ionut Arghire

AI Summary

Threat actors are actively exploiting the 'Plex2Shell' four-vulnerability chain targeting Plex Media Server installations on QNAP NAS devices, enabling remote code execution. QNAP NAS devices are frequently targeted due to internet exposure and their role in storing sensitive data; the chained exploit lowers the barrier for full compromise. Users running Plex on QNAP should patch both platforms and restrict external access immediately.

Read full article → https://www.securityweek.com/plex2shell-exploited-…

Relevance score: 85.0/100

# More from November 10

1
Hackers exploit SSHole OpenSSH flaw to breach Linux systems BleepingComputer
2
N-able takes cloud platform offline after 30+ "zero-days" published BleepingComputer
3
France blames Iranian hackers for supermarket attacks that sparked fires BleepingComputer
4
CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation The Hacker News
6
Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data The Hacker News
7
Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware The Hacker News
8
Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars The Hacker News
9
FBI agent stole $2.5 million in crypto from hackers under investigation BleepingComputer
10
Vanderbilt University hit in BYOD ransomware attack, data theft claimed BleepingComputer