A recent security breach involving Virtualizor highlights the vulnerabilities posed by Border Gateway Protocol (BGP) hijacking. Hackers successfully diverted traffic intended for Softaculous, allowing them to deliver a malicious update package to several Virtualizor installations. This incident resulted in root-level compromises on five out of thirty-four hypervisors checked by a hosting provider, demonstrating a critical lapse in the security mechanisms surrounding update delivery systems. The attack window was identified to have occurred around August 28, raising alarms about the potential for widespread exploitation if left unchecked.
For businesses utilizing Virtualizor, this incident serves as a stark reminder of the importance of robust cybersecurity practices, particularly concerning software updates and network routing protocols. Organizations must reassess their security postures, ensuring they implement stringent measures such as traffic validation, regular monitoring for suspicious activities, and the use of secure update mechanisms. This breach underscores the growing sophistication of cyber threats and the need for vigilance in safeguarding digital infrastructures, especially as reliance on virtualization technologies expands, making them attractive targets for cybercriminals.
---
*Originally reported by [The Hacker News](https://thehackernews.com/2026/09/bgp-hijack-delivers-malicious.html)*