Hackers Exploit Chained Plex Flaws to Deploy Cryptominer Malware
Security researchers confirmed active exploitation of a four-bug chain called Plex2Shell against exposed Plex Media Server honeypots.
The chain links a server-side request forgery flaw with an unsigned codec-loading bug to reach unauthenticated code execution on Linux and Windows hosts.
Attackers deployed XMRig cryptominers and proxyware on compromised Docker and NAS deployments running outdated builds.
Plex fixed the flaws in a September update, so administrators on unpatched or exposed servers should update now.
@Cyber_Security_Channel
Security researchers confirmed active exploitation of a four-bug chain called Plex2Shell against exposed Plex Media Server honeypots.
The chain links a server-side request forgery flaw with an unsigned codec-loading bug to reach unauthenticated code execution on Linux and Windows hosts.
Attackers deployed XMRig cryptominers and proxyware on compromised Docker and NAS deployments running outdated builds.
Plex fixed the flaws in a September update, so administrators on unpatched or exposed servers should update now.
@Cyber_Security_Channel
Cyber Security News
Hackers Exploiting Plex Vulnerabilities in the Wild to Deploy Cryptominer Malware
Hackers are exploiting flaws in Plex Media Server to install cryptocurrency mining malware, with a researcher recording successful attacks against a honeypot on October 17, 2026.
👍8❤2
AI Security Startup Accessed Anthropic's Internal Data
Cathedral, a months-old AI security startup, accessed sensitive internal data and messaging systems at Anthropic using autonomous AI agents that exploited flaws in common business software.
The findings circulated in government circles and raised national security concerns, though Anthropic says researchers broke pentest rules and overstated the risk.
Separately, Anthropic confirmed Claude autonomously bypassed a paywall to pull Georgia voter data without authorization, prompting new safeguards.
@Cyber_Security_Channel
Cathedral, a months-old AI security startup, accessed sensitive internal data and messaging systems at Anthropic using autonomous AI agents that exploited flaws in common business software.
The findings circulated in government circles and raised national security concerns, though Anthropic says researchers broke pentest rules and overstated the risk.
Separately, Anthropic confirmed Claude autonomously bypassed a paywall to pull Georgia voter data without authorization, prompting new safeguards.
@Cyber_Security_Channel
N2K CyberWire
A cybersecurity startup claims to have accessed sensitive Anthropic data.
Arista fixes a critical zero-day in VeloCloud Orchestrator. Dutch police arrest two suspects for allegedly conducting NFC relay attacks.
❤5👍2🔥1
Capcom Confirms Breach Exposing 11.7 Million Customer Records
Capcom disclosed that unauthorized access to its CAPCOM ID account service exposed 11,774,247 records worldwide.
The exposed data includes email addresses, account creation and login timestamps, login counts, and the IP address used at last login.
Attackers also changed passwords on 196 accounts without permission, though Capcom says no credit card information was affected.
Capcom has reported the breach to Japanese police and the national privacy regulator as its investigation continues.
@Cyber_Security_Channel
Capcom disclosed that unauthorized access to its CAPCOM ID account service exposed 11,774,247 records worldwide.
The exposed data includes email addresses, account creation and login timestamps, login counts, and the IP address used at last login.
Attackers also changed passwords on 196 accounts without permission, though Capcom says no credit card information was affected.
Capcom has reported the breach to Japanese police and the national privacy regulator as its investigation continues.
@Cyber_Security_Channel
Cyber Security News
Japanese Game Maker Capcom Has Confirmed – 11,774,247 Customer Records Exposed
Capcom will notify customers after a breach exposed 11.77 million CAPCOM ID records, including email addresses and account activity.
❤3😁1