peppericecream@lemmy.dbzer0.com to Selfhosted@lemmy.worldEnglish · 2 days agoPlex vulnerabilities being exploited in the wild to drop a cryptominerwww.boredhackerblog.infoexternal-linkmessage-square128linkfedilinkarrow-up1355arrow-down17file-text
arrow-up1348arrow-down1external-linkPlex vulnerabilities being exploited in the wild to drop a cryptominerwww.boredhackerblog.infopeppericecream@lemmy.dbzer0.com to Selfhosted@lemmy.worldEnglish · 2 days agomessage-square128linkfedilinkfile-text
The update got released over 2 months ago. So sensible admins should not be getting hit by this. Also I use Jellyfin btw.
minus-squareRxBrad@infosec.publinkfedilinkEnglisharrow-up6·24 hours agoMy Plex is updated, and hiding behind a random-long-text-string wildcarded subdomain that (so far) has not been discovered. My Crowdsec intercepted 5X the normal number of hacking attempts & port scans on October 17th… no doubt from dirtbags trying to exploit this.
minus-squareTaasz/Woof@lemmy.blahaj.zonelinkfedilinkEnglisharrow-up4·4 hours agoWildcard SSL does help a lot, since every subdomain isn’t broadcast publicly in the issuer logs.
minus-squareThePuy@feddit.nllinkfedilinkEnglisharrow-up1·4 hours agoThank god I have auto update for my exposed dockers…
My Plex is updated, and hiding behind a random-long-text-string wildcarded subdomain that (so far) has not been discovered.
My Crowdsec intercepted 5X the normal number of hacking attempts & port scans on October 17th… no doubt from dirtbags trying to exploit this.
Wildcard SSL does help a lot, since every subdomain isn’t broadcast publicly in the issuer logs.
Thank god I have auto update for my exposed dockers…