Plex2Shell Exploited Against QNAP NAS Users

SecurityWeek - Nov 9, 2026

Threat actors are exploiting the four-flaw chain to hack the Plex Media Server application on QNAP NAS devices. The post Plex2Shell Exploited Against QNAP NAS Users appeared first on SecurityWeek.

Read full article

MORE NEWS

NASA's Voyager 1 is about to reach a distance no human-made object has ever travelled — here's what one light-day means

Nov 12, 2026

NASA's Voyager 1 is about to reach a distance no human-made object has ever travelled — here's what one light-day means

Launched in 1977, Voyager 1 is expected to reach the milestone on Wednesday (November 18), when it will be more than 16 billion miles (25.9 billion kilometres) from Earth.

New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access

Nov 12, 2026

New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access

Public exploit code released earlier this week claims that a local Windows user can gain SYSTEM privileges through the Common Log File System driver. The proof of concept, called SignDrop, targets a log-authentication feature added to the driver last year. It abuses how clfs.sys creates companion files when a privileged process opens a prepared log, using path redirection to take control of

Jensen Huang’s Resignation From Nvidia Could Complicate Billions in Philanthropic Giving

Nov 12, 2026

Jensen Huang’s Resignation From Nvidia Could Complicate Billions in Philanthropic Giving

Mr. Huang, the company’s co-founder, and his wife oversee a charitable foundation with about $9 billion in assets.

The rise and fall of Jensen Huang - how the tech superstar became mired in scandal

Nov 12, 2026

The rise and fall of Jensen Huang - how the tech superstar became mired in scandal

Within days, Huang's status as a seemingly untouchable figure leading the global tech race has crumbled.

BBC Inside Science

Nov 12, 2026

BBC Inside Science

A weekly programme looking at the science that's changing our world.

Zoe Kleinman: How AI visionary Jensen Huang was undone by his own bad decisions

Nov 12, 2026

Zoe Kleinman: How AI visionary Jensen Huang was undone by his own bad decisions

Zoe Kleinman explains how the man who built Nvidia from the ground up lost everything in a matter of days.

Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry

Nov 12, 2026

Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry

A critical flaw in Red Hat Quay allows an attacker who can access a Quay registry to read and overwrite private container images in every repository. Quay enables anonymous access by default, and while it is enabled, the attacker needs no account. When it is off, anyone with a valid account can still exploit the flaw, Red Hat said yesterday. The company has released fixed builds for eight Quay

America's sleeper agent nightmare comes true as hidden invasion emerges: Ex-FBI boss reveals terror attack targets and exactly how they will strike

Nov 12, 2026

America's sleeper agent nightmare comes true as hidden invasion emerges: Ex-FBI boss reveals terror attack targets and exactly how they will strike

A veteran FBI agent warns that millions will be in danger from terror cells hiding in the US.

What to Know About the Turmoil at Nvidia as Jensen Huang Resigns as C.E.O.

Nov 12, 2026

What to Know About the Turmoil at Nvidia as Jensen Huang Resigns as C.E.O.

Jensen Huang, Nvidia’s chief executive, resigned on Thursday after admitting to an affair with a woman who U.S. intelligence says was spying for China.

Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass

Nov 12, 2026

Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass

Citrix has released patches for multiple critical security flaws impacting NetScaler ADC, Citrix NetScaler Gateway, and NetScaler Console that could lead to denial-of-service (DoS) or an authentication bypass. The critical vulnerabilities that impact NetScaler ADC and NetScaler Gateway are listed below - CVE-2026-120868 (CVSS score: 9.3) - A memory overflow vulnerability in Packet

What we know as Nvidia CEO Jensen Huang resigns over affair allegations

Nov 12, 2026

What we know as Nvidia CEO Jensen Huang resigns over affair allegations

The billionaire tech executive has left the company following reports of a second extramarital affair.

186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers

Nov 12, 2026

186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers

Cybersecurity researchers have found that lookalike domains masquerading as artificial intelligence (AI) tools are being used to serve ClickFix-style lures, browser-hijacking malware, and a set of extensions that hijack user searches. This delivery pattern has been codenamed TypoPrompting by Island. "AI-app lookalikes that turn an attempt to reach a familiar tool into a prompt to verify,

RECOMMENDED

Science Thread

Science Thread delivers quality and fascinating science and technology content that matters on a daily basis and makes it go viral.

ABOUT US
Sign Up

Copyright © 2015 - 2026 Science Thread. All Rights Reserved.