QNAP has confirmed that attackers are exploiting a chain of four Plex Media Server vulnerabilities, dubbed Plex2Shell, to compromise customers' NAS devices. The company says its technical support team is assisting affected users and is urging everyone to update Plex Media Server to version 1.43.3.10861 via the QNAP App Center. QNAP clarified that the flaws affect only Plex Media Server, not its QTS, QuTS hero, or other NAS operating systems.
bleepingcomputer.com
· 2026-11-06
Evernote's top annual subscription tier has risen from $130 to $250 under owner Bending Spoons, which acquired the note-taking app in 2023. The increase mirrors steep price hikes at other long-running consumer apps, including Plex, Quicken, Robokiller and Inkdrop, some of which have doubled or more in cost over the past decade.
arstechnica.com
· 2026-10-27
Aging Chromebooks that no longer perform well can still serve useful purposes rather than being discarded. By installing Linux, users can turn them into file or media servers running apps like Plex or Jellyfin, or into dedicated retro gaming machines using the Batocera emulator suite. Alternatively, ChromeOS's built-in Linux feature, Crostini, lets users run a Linux virtual machine without replacing the operating system, though with more limited performance.
engadget.com
· 2026-10-25
According to a forum post addressed to Plex's drzoidberg33, Plex has laid off the staff responsible for building its player clients, following widespread complaints that the newer 'New Experience' apps crash and underperform compared to earlier versions. The poster says users have been turning to unofficial, 'vibe coded' third-party apps to get reliable media playback instead.
forums.plex.tv
· 2026-10-21
CISA has issued an alert that attackers are actively exploiting four vulnerabilities in Plex Media Server, collectively named Plex2Shell, which when chained together let an attacker obtain an admin token and execute code with elevated privileges. The flaws were found by researcher Zach Main, disclosed to Plex in July, and published with proof-of-concept code in mid-October, after which exploitation attempts began targeting honeypots to deploy cryptominers. CISA has ordered federal agencies to patch or mitigate affected systems by October 23, with fixes available in Plex Media Server version 1.43.3.10861 and later.
bleepingcomputer.com
· 2026-10-21
Reports indicate attackers are exploiting vulnerabilities in Plex Media Server software to install malware on affected systems. Plex is advising all server administrators to update to the latest version to patch the security flaws. No specific details on the vulnerability or scope of attacks were included in the available information.
techspot.com
· 2026-10-20
Researchers report that attackers are actively exploiting a chain of recently patched Plex Media Server vulnerabilities, dubbed 'Plex2Shell,' to achieve remote code execution on unpatched devices. A honeypot set up to monitor the activity recorded scanning within a day and subsequent successful infections that install cryptomining software and residential proxy applications.
arstechnica.com
· 2026-10-19
Security researchers report that known vulnerabilities in Plex media server software are being actively exploited by attackers to deploy cryptocurrency mining malware on compromised systems. The exploitation targets unpatched or outdated Plex installations exposed to the internet.
boredhackerblog.info
· 2026-10-19
The PlayStation 3, now 87 million units sold since launch, has lost support from most third-party streaming services, including Crunchyroll in 2022, Plex in 2023 and Netflix in March 2026. Despite this, the console can still be repurposed for tasks like streaming media from a PC, playing Blu-ray discs, ripping CDs, and emulating retro games.
engadget.com
· 2026-10-19
A home server is a server. Exposed media and file services get scanned and exploited within days of a disclosure, and the fix is a routine rather than vigilance.
gokawiil.com
· 2026-10-19
Plex has partnered with Fandango to let US users buy movie theater tickets directly from title pages for films currently playing in theaters. The integration uses Kochava for attribution tracking, letting studios and advertisers measure how campaigns translate into ticket sales. Fandango, which sells tickets for 31,000 US theater screens, gains access to Plex's viewing and search data to gauge audience intent.
arstechnica.com
· 2026-10-15
Nvidia has raised the price of its Shield TV Pro streaming device from $199.99 to $299.99, a $100 increase despite no hardware changes. An Nvidia spokesperson told Ars Technica the hike, effective October 2, stems from rising component costs, particularly memory, across the industry. The company has also discontinued the standard Shield TV, leaving the Pro as its only Shield-branded device.
tomshardware.com
· 2026-10-03
GoKawiil