BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access

Virtualizor said hackers used a Border Gateway Protocol (BGP) hijack to divert Softaculous traffic. The hackers then used the diverted update traffic to deliver a malicious Virtualizor package to some installations. A hosting-provider account separately said 5 of its 34 checked Virtualizor hypervisors sustained root-level compromise. The incident window ran from approximately August 28 at 20:57

thehackernews.com ·2026-09-02

BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access

We haven't written up this one. The Hacker News has the full story — the link below goes straight to it.

Read the original at thehackernews.com →

More in Tech

Aitan announces $41m. raise, along with a new identity and mission for sovereign robotic warfare

Aitan develops edge‑AI robotic weapon systems engineered for the operational realities of modern conflict and aims to accelerate its international growth with the new funding.

Aitan raises $41 million, totaling $54 million
Rebrands to provider of full-spectrum autonomous robotic warfare
Technology battle-tested with 500,000 combat hours

2026-09-02 ·jpost.com

$30 buys you a brand-new HyperX gaming headset — save 40% on the CloudX Stinger 2 with massive 50mm drivers

With a massive 40% knocked off the list price, the HyperX CloudX Stinger 2 is only $29.99 on the HyperX store.

2026-09-02 ·tomshardware.com

Trust fall: TSMC's relationship with Apple is something Intel struggles to match

Intel's loss of Apple's chip custom during the Apple Silicon era was due to Apple trusting TSMC more. Years later, it's a lesson that Intel hasn't taken to heart.

2026-09-02 ·appleinsider.com

AI adoption is outpacing security in critical infrastructure

Energy, manufacturing and utility operators are wiring decades-old plants into modern networks just as attackers gain machine-speed tooling, and critical infrastructure cybersecurity is where that mismatch bites hardest. Awareness of the risk is widespread, but action in many sectors is still lagging.

2026-09-02 ·siliconangle.com

FBI investigating 153 million US and Canadian driver’s licenses leaked on Russian cybercrime forum, including that of US SecDef Pete Hegseth — data is suspected to have come from an ID-authentication service provider

The leak was traced to a major ID-authentication service based in Louisiana, serving major companies like Hertz, Target, and the United States Coast Guard.

2026-09-02 ·tomshardware.com

CrowdStrike and federal authorities dismantle Russian malware that secretly stole crypto for 8 years

Russia-based Sality watched for copied bitcoin and Ethereum addresses and quietly replaced them with the attacker’s. CrowdStrike and law enforcement have now isolated more than 15,000 infected machines.

2026-09-02 ·coindesk.com