CISA Warns of Active Exploitation of Chained Plex Media Server Vulnerabilities in "Plex2Shell" Attacks
Four security flaws being chained together to breach servers globally, with CISA adding vulnerabilities to its Known Exploited Vulnerabilities catalog
Key Takeaways
- CISA confirms active exploitation of four Plex Media Server vulnerabilities in "Plex2Shell" attacks.
- The vulnerabilities are being chained together to achieve remote code execution and server compromise.
- Affected vulnerabilities have been added to CISA's Known Exploited Vulnerabilities (KEV) catalog.
- Federal agencies and critical infrastructure entities are mandated to patch affected systems immediately.
Related Security News
Critical PHP Vulnerabilities Exploited in the Wild, Widespread Patching Required
Security researchers have identified two critical vulnerabilities in the PHP core software that are being actively exploited in the wild. The flaws allow remote attackers to seize full control over affected servers. Approximately 70 percent of websites running unpatched PHP core software are expected to experience outages, including 404 or 'Page Not Found' errors, as administrators apply emergency patches. Working exploits are available, and the vulnerabilities have been reported as already being used by attackers.
OVHcloud GitHub Compromise Attributed to GlassWorm Threat Actors
A developer's GitHub account, compromised several months prior to discovery, was leveraged by GlassWorm threat actors to push malicious code to unsuspecting users. The incident ties back to OVHcloud infrastructure and highlights ongoing supply chain risks within the developer ecosystem.
