PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

An Overview of BGP Hijacking

bishopfox.com | blog | #network-security | #bgp-hijacking | #routing | #autonomous-systems | #internet
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

An introduction to BGP hijacking: how the Border Gateway Protocol routes traffic between Autonomous Systems, why more specific prefix announcements divert traffic, and who abuses it.
Published
Collected

Related coverage

blog · bishopfox.com
In the News: A BGP Hijacking Technical Post-Mortem
Technical post-mortem of the January 2017 BGP hijack by Iran's TIC, which censored 99.192.226.0/24 and leaked globally; BGPlay visualizations show how the bogus routes spread and were countered.
blog · blog.quarkslab.com
Overview of Passive Optical Networks (PONs) Security
Passive Optical Networks (PONs) connect end-users to infrastructure using optical fibre in the last kilometre (Fibre-to-the-x). This article provides a technical overview of the security features in ITU-T specifications: Gigabit-capable PON (GPON), 10-Gigabit-capable PON (XG-PON), 10-Gigabit-capable Symmetric PON (XGS-PON), Next-generation PON 2 (NG-PON2), and 50-Gigabit-capable PON (50G-PON). The analysis covers authentication schemes, key derivation, encryption methods, and associated security implications.
blog · aikido.dev
Aikido launches external network pentesting
TL;DR: Aikido now pentests your external network. Attackers already test your perimeter every day, and with AI agents doing the grunt work, they're faster than ever. Now you can run the same test first. Give our agents one domain and they'll map the internet-facing systems you run and attack them from the outside, exactly like a malicious actor would.
blog · wiz.io
Unifying Cloud Risk and Network Defense: Wiz and Check Point
Wiz partners with Check Point to bring firewall context into the Security Graph: CloudGuard policies show which resources are protected, and exposures are validated from the internet.
blog · netspi.com
Internal vs. External Penetration Testing: What You Need to Know
External penetration testing examines internet-facing services, while internal testing simulates insider threats or post-breach attackers. This article compares the two approaches and their use cases.
blog · wiz.io
How to use the new CloudTrail network activity events for AWS VPC Endpoints
How AWS's new CloudTrail network activity events for VPC Endpoints help troubleshoot endpoint policies safely and strengthen defenses against data exfiltration, with sample use cases for defenders.
Back