peppericecream@lemmy.dbzer0.com to Selfhosted@lemmy.worldEnglish · 17 hours agoPlex vulnerabilities being exploited in the wild to drop a cryptominerwww.boredhackerblog.infoexternal-linkmessage-square74linkfedilinkarrow-up1244arrow-down16file-text
arrow-up1238arrow-down1external-linkPlex vulnerabilities being exploited in the wild to drop a cryptominerwww.boredhackerblog.infopeppericecream@lemmy.dbzer0.com to Selfhosted@lemmy.worldEnglish · 17 hours agomessage-square74linkfedilinkfile-text
The update got released over 2 months ago. So sensible admins should not be getting hit by this. Also I use Jellyfin btw.
minus-squareThe Zen Cow Says Mu@infosec.publinkfedilinkEnglisharrow-up13arrow-down1·12 hours agoIf you want to expose plex to the open Internet (not a VPN) Don’t open the plex port to the internet. Turn off the “remote access” setting and run it behind a reverse proxy instead.
minus-squarefonix232@fedia.iolinkfedilinkarrow-up6·12 hours agoAnd if you run a reverse proxy, put crowdsec on it. The free options for filters are pretty well maintained.
If you want to expose plex to the open Internet (not a VPN) Don’t open the plex port to the internet. Turn off the “remote access” setting and run it behind a reverse proxy instead.
And if you run a reverse proxy, put crowdsec on it. The free options for filters are pretty well maintained.