peppericecream@lemmy.dbzer0.com to Selfhosted@lemmy.worldEnglish · 5 days agoPlex vulnerabilities being exploited in the wild to drop a cryptominerwww.boredhackerblog.infoexternal-linkmessage-square136fedilinkarrow-up1364arrow-down16file-text
arrow-up1358arrow-down1external-linkPlex vulnerabilities being exploited in the wild to drop a cryptominerwww.boredhackerblog.infopeppericecream@lemmy.dbzer0.com to Selfhosted@lemmy.worldEnglish · 5 days agomessage-square136fedilinkfile-text
The update got released over 2 months ago. So sensible admins should not be getting hit by this. Also I use Jellyfin btw.
minus-squareThe Zen Cow Says Mu@infosec.publinkfedilinkEnglisharrow-up17arrow-down3·5 days agoIf you want to expose plex to the open Internet (not a VPN) Don’t open the plex port to the internet. Turn off the “remote access” setting and run it behind a reverse proxy instead.
minus-squarefonix232@fedia.iolinkfedilinkarrow-up9·5 days agoAnd if you run a reverse proxy, put crowdsec on it. The free options for filters are pretty well maintained.
If you want to expose plex to the open Internet (not a VPN) Don’t open the plex port to the internet. Turn off the “remote access” setting and run it behind a reverse proxy instead.
And if you run a reverse proxy, put crowdsec on it. The free options for filters are pretty well maintained.