> TritonInfoSec News
Home / Sep 03, 2026 / Story
0
#6 The Hacker News general September 02, 2026 at 13:12 UTC

BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access

By [email protected] (The Hacker News)

AI Summary

Threat actors executed a BGP hijack against Softaculous update infrastructure to deliver a malicious Virtualizor VPS management update package, establishing persistent root access on compromised hypervisors. The attack window ran from approximately August 28 at 20:57 UTC, and a hosting provider confirmed root-level compromise on 5 of 34 checked Virtualizor nodes. The use of a technically valid TLS certificate for Softaculous domains allowed the attack to bypass certificate validation checks, underscoring BGP's role as a critical trust dependency.

Read full article → https://thehackernews.com/2026/09/bgp-hijack-deliv…

Relevance score: 83.0/100

# More from September 03

  1. 1
    FBI Probes Service Selling 153M+ Drivers Licenses Krebs on Security
  2. 2
    Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain The Hacker News
  3. 3
    Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads The Hacker News
  4. 4
    Health data of more than 9.5 million people leaked from Aesto record system The Record
  5. 5
    Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure The Hacker News
  6. 7
    Pegasus, NoviSpy variant spyware found on devices of Serbian activists CyberScoop
  7. 8
    Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials The Hacker News
  8. 9
    Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks BleepingComputer
  9. 10
    Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code The Hacker News