peppericecream@lemmy.dbzer0.com to Selfhosted@lemmy.worldEnglish · 1 day agoPlex vulnerabilities being exploited in the wild to drop a cryptominerwww.boredhackerblog.infoexternal-linkmessage-square95linkfedilinkarrow-up1292arrow-down16file-text
arrow-up1286arrow-down1external-linkPlex vulnerabilities being exploited in the wild to drop a cryptominerwww.boredhackerblog.infopeppericecream@lemmy.dbzer0.com to Selfhosted@lemmy.worldEnglish · 1 day agomessage-square95linkfedilinkfile-text
The update got released over 2 months ago. So sensible admins should not be getting hit by this. Also I use Jellyfin btw.
minus-squareThe Zen Cow Says Mu@infosec.publinkfedilinkEnglisharrow-up16arrow-down3·20 hours agoIf you want to expose plex to the open Internet (not a VPN) Don’t open the plex port to the internet. Turn off the “remote access” setting and run it behind a reverse proxy instead.
minus-squarefonix232@fedia.iolinkfedilinkarrow-up8·20 hours agoAnd if you run a reverse proxy, put crowdsec on it. The free options for filters are pretty well maintained.
If you want to expose plex to the open Internet (not a VPN) Don’t open the plex port to the internet. Turn off the “remote access” setting and run it behind a reverse proxy instead.
And if you run a reverse proxy, put crowdsec on it. The free options for filters are pretty well maintained.