EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Hacker News·Sep 2·5 min read
BGP hijack infecting networks caused by a comedy of errors
TL;DR
Hackers executed a BGP hijacking to control IP addresses of Softaculous, pushing malware disguised as software updates to users. This incident highlights critical lapses in routing security and software update validation.
✦ Why It Matters
Ensure your software update processes include code signing to prevent similar attacks.
Key Takeaways
- Implement code signing for all software updates.
- Regularly audit routing security configurations.
- Monitor IP address announcements for anomalies.
- Educate teams on supply chain attack vectors.
How It Works
The attackers exploited BGP, a protocol that manages how packets are routed across the internet, to hijack IP addresses. By misconfiguring routing security, they redirected traffic meant for Softaculous to their own servers, allowing them to deliver malicious updates disguised as legitimate software.