TECH NEWS

Plex2Shell Exploited Against QNAP NAS Users

Threat actors are exploiting Plex2Shell to hack into Plex Media Server applications on QNAP NAS devices, Taiwanese storage and networking solutions provider QNAP warns.

Plex2Shell is a chain of four vulnerabilities (CVE-2026-96652, CVE-2026-96654, CVE-2026-96655 and CVE-2026-96656) in Plex Media Server that was patched this summer.

Widespread exploitation of the four-flaw chain started in mid-October, after technical details and proof-of-concept (PoC) code were published.

Successful exploitation of Plex2Shell does not require valid credentials and could allow attackers to execute arbitrary code on exposed servers, with the privileges of the Plex service.

Plex Media Server is available as a third-party application to QNAP NAS users, through the official App Center.

“QNAP has received reports from some users that Plex Media Server on their NAS appears to have been compromised through these vulnerabilities,” the Taiwanese firm warned on Friday.

Advertisement. Scroll to continue reading.

“The QNAP Technical Support team is assisting affected users...

Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE

https://cdn.nextgov.com/media/img/cd/2026/11/06/GettyImages_2253398055/open-graph.jpg

CISA’s former Secure by Design chiefs launch their own software safety organization

da-kuk/Getty Images ByDavid DiMolfetta, Cybersecurity Reporter, Nextgov/FCW November 9, 2026 08:00 AM ET Lauren Zabierek and Bob Lord helped persuade hundreds of companies to pledge to build safer products. Now they want to evolve that work further. * Leadership * Cyber Defense * Software Development In November 1996, a hacker

How To Tell If Your Phone Supports eSIM

If you bought your phone in the past few years, it likely has eSIM support. Planning an international trip sounds fun until you realize just how much your phone bill will be. For such situations, eSIMs make more sense than physical SIMs. An eSIM is a digital SIM built directly

https://storage.googleapis.com/gweb-cloudblog-publish/images/1-header.max-1400x1400.jpg

Cloud Pathways, a distributed ML runtime, is GA

Today, we are thrilled to announce the general availability (GA) of Cloud Pathways (Pathways on Cloud) on Google Kubernetes Engine (GKE) as a core runtime pillar of the Google Cloud AI Hypercomputer. Originally engineered by Google DeepMind to train and serve Google's frontier models — including Gemini — Pathways is

https://storage.googleapis.com/gweb-cloudblog-publish/images/TPUs_8tx_and_8i_Max.max-2000x2000.png

Introducing TPU 8tx and TPU 8i Max

Editor’s note: This blog was originally published on News from Google. We first designed TPUs more than a decade ago motivated by Google’s internal demands, including voice recognition and language translation. Eight generations of TPUs later, the use cases have exploded, covering: i) training and serving our own

Read more

CISA’s former Secure by Design chiefs launch their own software safety organization

How To Tell If Your Phone Supports eSIM

Cloud Pathways, a distributed ML runtime, is GA

Introducing TPU 8tx and TPU 8i Max