Plex2Shell Exploit Used to Turn Vulnerable Plex Servers Into Crypto Miners
2026-10-20T02:51:36Z•ae6291652dd5a82ced117f560bf463e90a9bf840ccc608ecd1873f729f9cd51f
CVE-2026-106931AI securityBroadcom Wi-FiCikaBika BotConnectWiseDiscord C2Microsoft 365NgrokOS command injectionOpenBSDPlex Media ServerPlex2ShellRust malwareSiteGuard Server Editionactive exploitationcryptominingdeepfakeslocal privilege escalationproxywareremote access trojanrouter takeoverstolen credentialsvulnerability exploitation
What happened
Security Affairs RSS feed covering multiple October 2026 cybersecurity developments, including active exploitation of Plex2Shell and SiteGuard Server Edition vulnerabilities, OpenBSD local privilege escalation, Broadcom Wi-Fi router takeover, stolen ConnectWise credentials used against Microsoft 365, and CikaBika Bot malware operated through Discord and Ngrok.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- ae6291652dd5a82ced117f560bf463e90a9bf840ccc608ecd1873f729f9cd51f
- Enrichment time
- 2026-10-20T02:51:36Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.