Hacker news lastpass2/29/2024 “For reference, the version that addressed this exploit was roughly 75 versions ago. “Unfortunately, the LastPass employee never upgraded their software to activate the patch,” Plex said in a statement. The current version of Plex Media Server is 1. ![]() The shortcoming, which was discovered and reported to Plex by Tenable in March 2020, was addressed by Plex in version 1. ![]() “This issue allowed an attacker with access to the server administrator’s Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it,” Plex said in an advisory released at the time. The vulnerability in question is CVE-2020-5741 (CVSS score: 7.2), a deserialization flaw impacting Plex Media Server on Windows that allows a remote, authenticated attacker to execute arbitrary Python code in the context of the current operating system user. This, in turn, is said to have been made possible by exploiting a nearly three-year-old now-patched flaw in Plex to achieve code execution on the engineer’s computer, the streaming media service told The Hacker News in a statement. Let The Cloud Consultancy secure your business. As with other advice, give them the tools to defend against it in their personal lives and they will bring that behaviour back to work. Think about how you will help your staff understand the threat and how to spot phishing. Password management service LastPass suffered two known security breaches in August and November last year, with hackers using information obtained during the first breach to access shared cloud. Whatever your business, however big or small it is, you will receive phishing attacks at some point.
0 Comments
Leave a Reply.AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |