UNIX CONSULTINGIT security, defense and AI compliance Back to site

Cybersecurity watch

BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access

The Hacker News

Why it matters

This page references a cybersecurity signal published by The Hacker News. It helps CISOs, DPOs, IT leaders, infrastructure teams, SMBs and enterprise accounts track vulnerabilities, alerts and trends that may affect security, compliance or system resilience.

Unix Consulting read

This is a software supply-chain topic: dependencies, extensions, packages, plugins or distribution channels. It deserves a broader read than developer workstations because build, production, endpoints and privileged accounts may be affected.

Watch points

  • Dependencies used internally
  • Repository, signing and update controls
  • Ability to block or remove a component quickly

Recommended action

Identify affected repositories, packages, extensions or providers, then verify the ability to block, replace or trace the component.

Relevant for

Security teams, DevOps, application owners, IT leaders and integration providers.

Source summary

Virtualizor said hackers used a Border Gateway Protocol (BGP) hijack to divert Softaculous traffic. The hackers then used the diverted update traffic to deliver a malicious Virtualizor package to some installations. A hosting-provider account separately said 5 of its 34 checked Virtualizor hypervisors sustained root-level compromise. The incident window ran...

Read the source