Alert about Plex servers is flagged in my Google news alerts

[OttoKerner]

[FIX] PMS leveraged for amplified dDoS attack (SSDP)

EDIT: plex released a fix to prevent this. Greetings to whom it may concern: Netscout (Arbor) has just published a blog post in which they show / explain / claim how SSDP on the WAN port of a Plex Media Server that uses uPNP/NAT-PNP to expose its port to the internet, can be used to reflect+amplify a dDoS attack. (the attacker sending a forged packet to your plex server, the resulting answer will be sent to the (forged) source IP > the target of the attack) suggested action: Filter incoming…