Latest BGP hijack targets hosting software vendor
Guest Post: An analysis of the BGP hijack against Softaculous that enabled an attacker to obtain a fraudulent TLS certificate and distribute a malicious Virtualizor update.
Tag: security
APNIC 62: Updates in DNS, DHCP, certificate security, and BGP routing resilience
APNIC 62 Technical Session 1 — Internet Operations highlighted major developments across Internet infrastructure, including new management capabilities for Kea DHCP and BIND DNS, preparations for the DNSSEC root KSK rollover, and ongoing challenges in certificate revocation.
The case for open-weight models and why we can’t trust frontier labs
Guest Post: A frontier API can refuse, change, or vanish out from under you. Open weights keep the model you depend on yours.
APNIC and NIXI partner to strengthen routing security and technical capacity in India
The partnership will expand IPv6 and RPKI deployment including piloting an RPKI Repository Mirror to support a more secure and resilient Internet ecosystem.
The day after the zero-days
Guest Post: Patching faster cannot keep up with AI-driven discovery. Leverage structural invariants to make bug classes irrelevant.
Beyond origin validation: Four classes of routing attack nobody Is validating
Guest Post: RPKI has made real progress against prefix hijacking. But when you map every known class of BGP attack against the defences that exist, four of them turn out to sit entirely outside cryptographic validation — handled with local filters, static thresholds and reactive response.
Asia Pacific privacy laws are arriving. Your NREN holds more personal data than you think.
Guest Post: Privacy compliance starts with knowing your data. Many NREN services, including federated identity, eduroam, CSIRT operations, and network telemetry, process personal data and may already fall under emerging privacy laws.
APNIC 62 keynotes explore automation, trust, and the future of the Internet
APNIC 62 will explore two essential foundations of a resilient Internet: Intelligent network automation and trusted cybersecurity collaboration. Keynotes from Amajit Gupta and Yukako Uchida offer complementary perspectives on how technology and human relationships will shape the Internet’s future.
Finding zero-days with any model
Guest Post: Vulnerability discovery is an orchestration problem, not a frontier-model problem.
[Podcast] Canonical Cache Representation
Job Snijders discusses a new, compact representation of RPKI-signed objects and an archive of spooled snapshots of the global RPKI repositories.