{
  "id": 15657486,
  "title": "PSA: Patch your Plex media server before someone hacks it",
  "url": "https://urgent.news/2026/10/19/psa-patch-your-plex-media-server-before-someone-hacks-it",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-19T19:39:19.000Z",
  "source": {
    "name": "Ars Technica",
    "slug": "ars-technica",
    "url": "https://arstechnica.com/security/2026/10/recently-fixed-plex-media-vulnerabilities-are-being-exploited-to-install-malware/"
  },
  "original_language": "en",
  "account": "Recent vulnerabilities in the Plex Media Server have become targets for cybercriminals, who exploit them to install malicious software. The Plex team addressed four security flaws at the beginning of last month, but additional weaknesses surfaced three weeks later, with a severity rating reaching 8.6 out of 10. A researcher recently discovered a complex exploit chain, dubbed Plex2Shell, which combines four vulnerabilities to achieve remote code execution on vulnerable devices. The chain allows attackers to take control of the affected devices. A researcher created a honeypot to monitor the exploit chain in the wild, and within a day, they observed active scanning attempts and successful infections. The two primary payloads installed upon successful attacks are a cryptominer, using the compromised device for cryptocurrency mining, and residential proxy software, which enables users to bypass location-based restrictions while engaging in potentially illicit online activities.",
  "summary": "A researcher says attacks chaining 4 vulnerabilities is hacking unpatched boxes.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}