peppericecream@lemmy.dbzer0.com to Selfhosted@lemmy.worldEnglish · 14 hours agoPlex vulnerabilities being exploited in the wild to drop a cryptominerwww.boredhackerblog.infoexternal-linkmessage-square74linkfedilinkarrow-up1230arrow-down15file-text
arrow-up1225arrow-down1external-linkPlex vulnerabilities being exploited in the wild to drop a cryptominerwww.boredhackerblog.infopeppericecream@lemmy.dbzer0.com to Selfhosted@lemmy.worldEnglish · 14 hours agomessage-square74linkfedilinkfile-text
The update got released over 2 months ago. So sensible admins should not be getting hit by this. Also I use Jellyfin btw.
minus-squareThe Zen Cow Says Mu@infosec.publinkfedilinkEnglisharrow-up12arrow-down1·10 hours agoIf you want to expose plex to the open Internet (not a VPN) Don’t open the plex port to the internet. Turn off the “remote access” setting and run it behind a reverse proxy instead.
minus-squarefonix232@fedia.iolinkfedilinkarrow-up5·9 hours agoAnd if you run a reverse proxy, put crowdsec on it. The free options for filters are pretty well maintained.
If you want to expose plex to the open Internet (not a VPN) Don’t open the plex port to the internet. Turn off the “remote access” setting and run it behind a reverse proxy instead.
And if you run a reverse proxy, put crowdsec on it. The free options for filters are pretty well maintained.