Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor

The Hacker News feed reports multiple significant cybersecurity incidents and vulnerabilities, including active exploitation of Plex2Shell flaws, a hijacked Rank Math PRO WordPress supply chain, malicious npm packages, compromised ConnectWise identities affecting Microsoft 365 tenants, zero-day exploitation of BeyondTrust Remote Support, FortiOS exploitation, Linux VM-to-host memory exposure, and targeted phishing and spyware campaigns. Several items describe active exploitation, credential theft, remote code execution, supply-chain compromise, and cloud or virtualization impact.