MEDIUM/ OCTOBER 20, 2026TODAY’S BRIEFING — #214
WordPress, Plex, and Microsoft: Supply-chain backdoor and active cryptominer exploits
Rank Math PRO WordPress plugin compromised in supply-chain attack; Plex Media Server exploit chain actively weaponized for cryptominers and backdoors; Microsoft patches 1,400+ vulnerabilities.
CVE-2026-96652Plex Media Server — RCE exploited for cryptominers and proxy backdoors within 24 hours of PoC releaseCVE-2026-96654Plex Media Server — RCE exploited for cryptominers and proxy backdoors within 24 hours of PoC releaseCVE-2026-96655Plex Media Server — RCE exploited for cryptominers and proxy backdoors within 24 hours of PoC releaseCVE-2026-96656Plex Media Server — RCE exploited for cryptominers and proxy backdoors within 24 hours of PoC release
Read the full briefing →