PSA: Patch your Plex media server before someone hacks it
Recently fixed vulnerabilities in the Plex Media Server are under active exploitation in attacks that, when successful, install malware, including…
Ars Technica reports: Recently fixed vulnerabilities in the Plex Media Server are under active exploitation in attacks that, when successful, install malware, including cryptominers and residential proxy apps, a researcher said.
Plex fixed four vulnerabilities at the start of last month. Three weeks later, published CVE designations revealed five vulnerabilities, with one of them carrying a severity rating of 8.6 out of 10.
This technology story centres on the United States. Names and organisations mentioned in the coverage include PSA, Plex Media Server and Plex.
Why it matters
Changes in the tech sector often reach consumers quickly through the devices, apps and online services they use every day.
Key details
- Location
- United States · Americas
- Reported by
- Ars Technica
- First reported
- Key names
- PSA, Plex Media Server, Plex, CVE
- Section
- Technology
Sources
This is an independent summary. Read the full, original reporting from the publisher:
Read the full story at Ars TechnicaSpotted an error? Request a correction · How this summary was produced
Related Stories
Boone returning as Yankees manager in 2027, source says
Aaron Boone will return for his 10th season as manager of the Yankees in 2027, a source told ESPN on Monday, confirming a report by the Bergen Record.
Embedded AI evaluators won’t be an easy solution, Hugging Face’s policy chief says
However, the methods behind these evaluations are complicated and still maturing, said Irene Solaiman, Hugging Face’s chief policy officer, during a…
The Ebola crisis is far outpacing the response, Congo's IRC director says
Health workers battling the ongoing Ebola outbreak in Congo are hindered by lack of data, budget cuts and a fearful community.
US grants deportation reprieve to migrants from Ukraine and Sudan
Temporary protected status was set to end on Monday for about 101,000 Ukrainians and 1,800 Sudanese.
Elon Musk’s proposed SpaceX stock giveaway would go into ‘Trump Accounts’
President Donald Trump announced this afternoon that Elon Musk's SpaceX shares for children will be given through Trump Accounts.
Microsoft says AI agents are like insider threats as ‘frontier models can’t be trusted’
Microsoft wants enterprises to closely watch the agents employees use with systems not controlled by AI labs like OpenAI and Anthropic.
California to recieve $6m settlement after 23andMe data breach
The 2023 breach exposed millions of customers’ genetic and personal information, including more than 855,000 Californians California attorney…
CoreWeave’s debt is becoming the whole AI industry’s problem
Last Tuesady Chamath "SPAC King" Palihapitiya noticed the distressed debt, and also asked whether the AI buildout was a private credit bubble.



