PSA: Patch your Plex media server before someone hacks it
Summary
Ars Technica reports that recently fixed Plex Media Server vulnerabilities are being exploited in the wild to install malware. Researchers chained four vulnerabilities into a single exploit chain, Plex2Shell, which achieves remote code execution on unpatched servers. Observers have seen active probing and infections delivering a cryptominer and a residential-proxy payload; users are urged to patch to the latest version and harden exposure.