33-hour BGP hijack of Softaculous traffic prompts security scramble
Hosting software vendor tells customers to reset credentials and hunt for malicious packages
Softaculous BGP hijack - secure risks
- Thread starter nathany
- Start date
Hi, thank you for sharing.
I am curious however how we can control the damage against attacks like these.
In case of a BGP hijack, and to prevent further damage,
we should implement DNSSEC to secure our DNS,
we should configure CAA records and limit accounts that can requests certificates (wildcard and regular).
...
we should implement hsts
What else?
Kr
Dries
I am curious however how we can control the damage against attacks like these.
In case of a BGP hijack, and to prevent further damage,
we should implement DNSSEC to secure our DNS,
we should configure CAA records and limit accounts that can requests certificates (wildcard and regular).
...
we should implement hsts
What else?
Kr
Dries