CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws

The Hacker News · Wednesday, 21 October 2026 at 07:26 (3h ago) · Original article ↗

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including four vulnerabilities impacting Plex Media Server that's collectively called Plex2Shell.

CVE-2026-96652 (CVSS score: 5.3) - Plex Media Server Server-Side Request Forgery (SSRF)

You're reading a preview. The full article is published by The Hacker News on their website.

Read the full story on The Hacker News

Security

Microsoft says October updates didn’t actually fix VPN issues

Microsoft says it mistakenly flagged a bug causing Always On VPN connection issues as fixed in the October 2026 Windows 11 cumulative updates. [...]

BleepingComputer 16m ago

Security

She Was the DEA’s Premier Crypto Detective. The Clues Led Straight to Her Own Family

To escape the chaos of her Russian childhood, Lili Infante became an American law enforcement prodigy. She pioneered the DEA’s investigations of the dark web—never suspecting who she’d find hiding there.

Wired 31m ago

Security

Cyberpunk 2077 Edgerunners 2 Update Leaked Ahead of Reveal

To celebrate Edgerunners season 2, CD Projekt Red is releasing a patch for Cyberpunk 2077 riddled with themed content.

Polygon 36m ago

CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws

More Security & Privacy

Microsoft says October updates didn’t actually fix VPN issues

She Was the DEA’s Premier Crypto Detective. The Clues Led Straight to Her Own Family

Cyberpunk 2077 Edgerunners 2 Update Leaked Ahead of Reveal