Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
2026-10-20T01:24:00Z•e683b0faf0f9fb53327e6f03b82cf5a32b8808db30bd525c0081bdb82226c85e
CVE-2025-61624CVE-2026-102764CVE-2026-99999AI agent securityBeyondTrustChina-linked espionageFortinetGitHubLinux kernelMicrosoft 365WordPressactive exploitationadversary-in-the-middlebackdoorcloud securitycredential theftcryptocurrency miningnetwork appliancesnpmphishingransomware and malwaresupply-chain compromisevirtual machine escapezero-day
What happened
A Hacker News feed covering active exploitation, supply-chain compromises, credential theft, zero-days, cloud and virtualization escapes, AI-agent governance risks, and malware campaigns. The most severe items include a BeyondTrust Remote Support zero-day exploited by a China-linked actor (CVE-2026-102764), a critical Linux kernel guest-to-host memory disclosure (CVE-2026-99999), FortiOS exploitation delivering PEERSTITCH (CVE-2025-61624), and multiple vendor or package supply-chain attacks.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- e683b0faf0f9fb53327e6f03b82cf5a32b8808db30bd525c0081bdb82226c85e
- Enrichment time
- 2026-10-20T01:24:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.