> TritonInfoSec News
Home / Sep 04, 2026 / Story
0
#10 Ars Technica Security general September 02, 2026 at 11:00 UTC

BGP hijack infecting networks caused by a comedy of errors that’s not funny at all

By Dan Goodin

AI Summary

A BGP hijacking incident resulted in a threat actor using a technically valid TLS certificate for Softaculous domains to redirect traffic and serve malicious Virtualizor software updates to production servers. The attack demonstrates how BGP route manipulation combined with legitimate-looking certificates can completely undermine software update trust chains. The incident is a practical case study in supply chain risk for infrastructure operators relying on third-party software delivery without additional integrity verification.

Read full article → https://arstechnica.com/security/2026/09/well-exec…

Relevance score: 80.0/100

# More from September 04

  1. 1
    CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners The Hacker News
  2. 2
    Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root The Hacker News
  3. 3
    Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone The Hacker News
  4. 4
    Sality botnet infrastructure dismantled in joint global takedown BleepingComputer
  5. 5
    Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data The Hacker News
  6. 6
    Critical Elementor Pro flaw exploited to take over WordPress sites BleepingComputer
  7. 7
    OpenAI’s Astra Becomes First Model to Cross Critical Cybersecurity Threshold SecurityWeek
  8. 8
    Hackers exploit critical JFrog Artifactory flaw to forge admin tokens BleepingComputer
  9. 9
    153 Million Driver License Images Offered on Dark Web SecurityWeek