Attackers are chaining four recently patched Plex Media Server flaws in a remote-code-execution exploit called Plex2Shell. Within a day, a honeypot detected active scanning and infections that installed cryptocurrency miners and residential proxy software. One disclosed flaw was rated 8.6 out of 10.