Thank god I have auto update for my exposed dockers…
Comment on Plex vulnerabilities being exploited in the wild to drop a cryptominer
RxBrad@infosec.pub 22 hours ago
My Plex is updated, and hiding behind a random-long-text-string wildcarded subdomain that (so far) has not been discovered.
My Crowdsec intercepted 5X the normal number of hacking attempts & port scans on October 17th… no doubt from dirtbags trying to exploit this.
AlboTheGuy@feddit.nl 2 hours ago
MangoPenguin@lemmy.blahaj.zone 2 hours ago
Wildcard SSL does help a lot, since every subdomain isn’t broadcast publicly in the cert logs.