Hackers hijacked BGP routing to deliver malicious Virtualizor updates, compromising root access on some servers and prompting security warnings.

Guest Post: An analysis of the BGP hijack against Softaculous that enabled an attacker to obtain a fraudulent TLS certificate and distribute a malicious Virtualizor update.

Guest Post: An analysis of the BGP hijack against Softaculous that enabled an attacker to obtain a fraudulent TLS certificate and distribute a malicious Virtualizor update.

### KVM VPS from $48/year | SSD RAID10 | IPv4 + IPv6 | Since 2016​ HostNamaste has been providing affordable and reliable VPS hosting since 2016. We're pleased to offer our Yearly KVM VPS plans in Los Angeles (USA), Dallas (USA), Paris (France), and Toronto (Canada) with enterprise SSD RAID10 storage, KVM virtualization, Virtualizor VPS Control Panel, IPv4 + IPv6, and responsive technical support. * * * ### ✅ Why Choose HostNamaste?​ ✔ Established... Read more

The Virtualizor control panel (versions before 3.2.9 and 3.0.0) lets anyone on the internet send specially crafted data to its billing feature, causing.

The Virtualizor control panel (versions before 3.2.9) can be tricked into running any command on the server without a password.

**SmokyHosts.com - Smoking Away the Competition _Sales Desk_ :: sales@smokyhosts.com** **Today are now launching VPS services in a brand new region - Hong Kong! Grab the introductory deal from Hong Kong before the middle eastern war drives up the power prices in Asia!**​ **Unleash the Potential of Your Website with SmokyHosts' VPS Hosting** In today's competitive online landscape, website performance is paramount. SmokyHosts' VPS... Read more

A BGP hijack targeting Softaculous shows how routing attacks can enable malicious software updates and bypass layers of Internet security.

**What is PreMadeKB?** PreMadeKB provides pre-written tutorial articles for web hosting companies. You can easily use it with WHMCS, Blesta, HostBill, SupportPal, ClientExec, Zendesk, and WordPress. It has over 470 tutorials on topics like cPanel, Plesk, DirectAdmin, Softaculous, Virtualizor, SolusVM 2, Outlook, PayPal, CloudLinux, **VirtFusion** , **CWP** Control Web Panel, and more. **We now have 470 professionally written tutorials: 431 in the base package and 39 available as...** Read more

・原宿餃子楼 ・August 27 outage: Incident report | Proton ・ラムネ｜森永製菓株式会社 ・Security Incident – BGP Hijacking – Virtualizor ・Latest BGP Hijack Targets Hosting Software Vendor | Kentik Blog ・#StopRansomware: Medusa Ransomware | CISA ・The Crown Prince, Nezha | Huntress ・GTO | 関西テレビ放送 カンテレ ・俺のスカート、どこ行った？｜日本テレビ 辻伸弘メモ：30分はかなり短い。不満。再放送してほしいねん。久々の3人でご飯。入ってきてからのこと。冷却故障再び。想定の幅。どんなお便りもありがたいんですよ。知らん人からの招待に気をつけて。日本にも来てるって！注意喚起って何かしら目を引くものあるといいですよね。Asanaとかもあるんかな。こういった攻撃は状況全体を見渡す形での管理しにくそう。知り合いや同じ組織の人から来るのは何故なのか。どこまでそういったリストを用いているのか知りたい。先行マルウェア。割とそこそこ発生しているんですね。BGPハイジャックの後、悪意のあるアップデートを配信ってこれきついなぁ。証明書まで用意されたらインストール後まで気付きようないやん。配布されたもので認証情報が取られた？狙われた顧客のジャンルを考えると影響範囲が広がりそうなインシデントですね。3CXの例ですね。自分たちの管理が及ぶところかそうでないところかでレスポンスの迅速さに影響でそう。便利さと安全性のバランス。バレンタインデーが最後のリークであるMadusaの話。保険というか医療関係でしたね。IABの募集は結構前の印象あった。広範囲に攻撃していけそうなところをフィルタする仕組み。開けて閉めて。ネットワーク全体を効率的に管理する方向に進んでいると思う。時間の経過で変化するものとしなさそうなものの見極め、ジェネリックな部分はどこかを考えることは大事です。28年ぶりでした。 【チャプター】 | いつもの雑談から | 00:00 | | お便りのコーナー | 05:27 | | (P) Slack の不正なワークスペース招待への注意喚起 | 18:50 | | (N) BGP ハイジャックによるソフトウェアサプライチェーン攻撃 | 30:40 | | (T) Medusa ランサムウェアの攻撃活動 | 46:54 | | オススメのアレ | 62:30 | https://www.tsujileaks.com/media/are_260907_tochigi.mp3 Podcast: Play in new window | Download Subscribe: RSS

Hackers delivered malicious updates to the Virtualizor VPS management software after hijacking BGP routing for its update infrastructure and redirecting update requests to malicious servers.

Read more

This week: a massive breach of U.S. driver's licenses, Dropbox accounts breached, a BGP hijack, Artifactory flaw, Russian national indicted, Aesto health breach, a

Nexus is reportedly selling over 153 million driver's license scans on the dark web, prompting an FBI investigation. OpenAI has announced its models have achieved a significant "Critical" capability threshold in cybersecurity. International law enforcement successfully disrupted a long-standing botnet known as Sality. Cybercriminals are now exploiting AI hallucinations for a tactic called "slop squatting." Urgent security patches have been released for Cleo Harmony and Virtualizor vulnerabilities. A significant healthcare data breach occurred at Nutex Health in Texas, with hackers threatening to leak stolen patient information. A Russian national faces charges for allegedly infecting tens of thousands of freelancers with remote-access malware. AI advancements may also complicate government access to hacking tools by impacting the supply chain for such software. Rob Allen from Threat Locker discussed strategies for protecting workplaces against AI threats. The episode also featured space-cyber news and encouraged listeners to engage with the podcast.