Cybersecurity News
Filters
Filtered by category: The Hacker News, tag: vulnerability exploitation × Clear
Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
Matched: cryptocurrency
Hackers are exploiting a chain of four vulnerabilities in Plex Media Server, collectively dubbed Plex2Shell, to deploy cryptocurrency miners and reverse proxy backdoors. Exploitation began within a day of a public proof-of-concept release. The attack chain allows threat actors to achieve remote code execution on vulnerable systems. Users are urged to update Plex Media Server to the latest version to mitigate risk.
Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
Matched: Artificial Intelligence
A critical flaw in Langflow (CVE-2026-105740, CVSS 9.9) is being actively exploited, with 1,423 attempts recorded on honeypots. The vulnerability affects the open-source AI workflow platform, now owned by IBM following its February 2025 acquisition of DataStax. The flaw allows authenticated remote code execution, prompting security alerts from Previdian urging users to patch immediately.