PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

In the News: A BGP Hijacking Technical Post-Mortem

bishopfox.com | blog | #network-security | #bgp-hijacking | #routing | #censorship | #iran | #post-mortem
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Technical post-mortem of the January 2017 BGP hijack by Iran's TIC, which censored 99.192.226.0/24 and leaked globally; BGPlay visualizations show how the bogus routes spread and were countered.
Published
Collected

Related coverage

blog · bishopfox.com
An Overview of BGP Hijacking
An introduction to BGP hijacking: how the Border Gateway Protocol routes traffic between Autonomous Systems, why more specific prefix announcements divert traffic, and who abuses it.
blog · blog.quarkslab.com
Overview of Passive Optical Networks (PONs) Security
Passive Optical Networks (PONs) connect end-users to infrastructure using optical fibre in the last kilometre (Fibre-to-the-x). This article provides a technical overview of the security features in ITU-T specifications: Gigabit-capable PON (GPON), 10-Gigabit-capable PON (XG-PON), 10-Gigabit-capable Symmetric PON (XGS-PON), Next-generation PON 2 (NG-PON2), and 50-Gigabit-capable PON (50G-PON). The analysis covers authentication schemes, key derivation, encryption methods, and associated security implications.
blog · aikido.dev
Aikido launches external network pentesting
TL;DR: Aikido now pentests your external network. Attackers already test your perimeter every day, and with AI agents doing the grunt work, they're faster than ever. Now you can run the same test first. Give our agents one domain and they'll map the internet-facing systems you run and attack them from the outside, exactly like a malicious actor would.
blog · hunt.io
Iranian APT Infrastructure in Focus: Mapping State-Aligned Clusters During Geopolitical Escalation
Tracking Iranian state-aligned infrastructure during US–Israel–Iran escalation: 19 groups monitored, ASN clustering and TLS fingerprint patterns, plus hosting behaviors defenders should watch.
blog · wiz.io
Unifying Cloud Risk and Network Defense: Wiz and Check Point
Wiz partners with Check Point to bring firewall context into the Security Graph: CloudGuard policies show which resources are protected, and exposures are validated from the internet.
blog · netspi.com
Part 3: Ready for Red Teaming? Maximising Learning Outcomes and Collaborative Growth
Part 3 of the red teaming series: joint red/blue debriefs, blameless post-mortems, and shared processes turn exercise findings into lasting security improvements.
Back