Ubuntu fixes FRR RPKI regression in USN-7230-3
USN-7230-3 restores RPKI support in FRR after regression introduced by CVE-2024-55553 fix.
5 stories, newest first · one card per story
USN-7230-3 restores RPKI support in FRR after regression introduced by CVE-2024-55553 fix.

Nation-state actors abuse SS7, BGP, and unpatched telecom routers, including Salt Typhoon persistence via GRE tunnels.

RPKI-valid BGP hijack plus fraudulent TLS certificate delivered a malicious Virtualizor update to Softaculous customers, APNIC analysis shows.

Attackers BGP-hijacked Softaculous IP space via Hetzner routing lapses to push malicious Virtualizor updates to hosting servers.
Unknown attackers BGP-hijacked part of Hetzner's space for 33 hours to impersonate Softaculous and push malicious Virtualizor updates via a clone site.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views