[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Cybersecurity News · markdown

official (QNAP security notice, Nov 6); Plex confirms active widespread exploitation; QTS/QuTS hero themselves not vulnerable

QNAP: some NAS boxes running Plex Media Server look compromised via Plex2Shell — patch to 1.43.3.10861+, treat internet-exposed installs as dirty

  • Update path: App Center → My Apps → Plex Media Server ≥ 1.43.3, then confirm Settings → General shows 1.43.3.10861 or later.
  • If previously exposed: preserve Plex Logs before removal if you want QNAP support help; clean-reinstall QTS/QuTS hero per FAQ; reset Plex and NAS credentials; do not restore an old Codecs folder.
  • Exposure cut: disable Plex Remote Access and stop forwarding 32400 unless you front it with a VPN.
  • Plex2Shell was already on CISA KEV (Oct 20); this is the NAS-vendor confirmation that compromises are landing on QNAP installs specifically.

Sources: QNAP Security Notice: Plex2Shell — update to 1.43.3.10861 or later (Nov 6) · BleepingComputer: QNAP says hackers breaching NAS devices in Plex2Shell attacks