Curated Cyber Threat Intelligence
Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports
Filtered Reports
3 / 3 results
highbug_reportVulnerabilitybug_reportVulnerability
Plex2Shell chain exploited in wild to deploy crypto miners and backdoors
Plex Media Server versions prior to 1.43.3.10861. Four-vulnerability chain (CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, CVE-2026-96656) enables unauthenticated remote code execution.
Plex19 Oct · 15:32 UTC
highbug_reportVulnerabilitybug_reportVulnerability
36,000 Plex Media Servers remain unpatched against undisclosed flaws
Plex Media Server v1.43.2 and earlier, Plex Desktop prior to v1.115.0. Over 36,000 internet-exposed instances confirmed vulnerable as of September 2026. Affects self-hosted and NAS-based deployments.
Plex9 Sep · 08:11 UTC
highbug_reportVulnerabilitybug_reportVulnerability
Plex urges immediate patching of undisclosed flaws in Media Server
Plex Media Server v1.43.2 and earlier, Plex Desktop client versions prior to 1.115.0. Affects all platforms including Windows, macOS, Linux, and NAS devices running Plex.
Plex3 Sep · 09:02 UTC