The problem with set-and-forget devices is that you can, well, set them and then forget about them. It’s good in terms of keeping it out of mind, but people can sometimes forget that their device still needs regular updates to stay secure. That’s what’s happening with Plex, as hackers are distributing Plex2Shell to devices that haven’t been updated since August.