Skip to content
securitytabs

Covered by 3 outlets — first reported by BleepingComputer, Nov 6, 17:04 UTC

QNAP says hackers breaching NAS devices in Plex2Shell attacks

MentionsQNAP

Summary

QNAP says attackers are breaching its network-attached storage (NAS) devices through Plex Media Server, using a chain of four flaws known as Plex2Shell. The Taiwanese vendor says it received reports from some users of compromised devices and urges them to update Plex Media Server to the latest version available in the QNAP App Center. SecurityWeek reports that threat actors are exploiting the four-flaw chain against QNAP NAS users.

AI summary by the SecurityTabs newsroom, checked against BleepingComputer, SecurityWeek, Security Affairs. Read the outlets below for the full story.

Continue reading

3 outlets, in the order they reported it.

  1. BleepingComputerFirst report

    QNAP says hackers breaching NAS devices in Plex2Shell attacks

    QNAP urges users to update Plex Media Server to the latest version available in the QNAP App Center, as hackers are exploiting the Plex2Shell vulnerability chain.

    Read at BleepingComputer Details

  2. SecurityWeek

    Plex2Shell Exploited Against QNAP NAS Users

    Threat actors are exploiting the four-flaw chain to hack the Plex Media Server application on QNAP NAS devices.

    Read at SecurityWeek Details

  3. Security Affairs

    QNAP Warns Users as Plex2Shell Flaws Are Used to Hack NAS Devices

    Taiwanese vendor QNAP urges users to update Plex Media Server after reports of NAS compromises through the Plex2Shell vulnerability chain.

    Read at Security Affairs Details

Explained

The technology and terms in this story. Learn more