# BGP Hijack Compromises Virtualizor Updates, Highlights Supply Chain Vulnerabilities

*Published September 4, 2026*
*Source: [https://risky.biz/RBNEWS608/](https://risky.biz/RBNEWS608/)*

## Executive Summary

A BGP hijack has compromised Virtualizor software updates, allowing attackers to deploy malicious packages to users. This incident highlights the growing threat of supply chain attacks and the need for robust verification measures.

## Article

A recent incident involving a Border Gateway Protocol (BGP) hijack has raised alarms in the cybersecurity community. This attack specifically targeted Virtualizor, a widely used virtual machine management software, to distribute malicious software updates. BGP hijacking is a technique where attackers redirect internet traffic by corrupting the routing tables, and in this case, it was used to divert update traffic away from legitimate servers to those controlled by the attackers.

The impact of this hijack is significant. Virtualizor's user base, which includes cloud service providers and enterprises, was exposed to potentially harmful software disguised as legitimate updates. The malicious package could grant attackers unauthorized access to affected systems, posing severe risks to data integrity and network security.

This incident is part of a broader trend of supply chain attacks, where attackers compromise trusted software or hardware components to infiltrate organizations. The recent Project Watershed and other similar incidents underscore the critical need for vigilance in managing third-party software dependencies.

To mitigate such risks, organizations should employ strategies to verify the authenticity of software updates. This includes using cryptographic signatures and implementing strict network monitoring to detect anomalies in update traffic. Regular audits of third-party software and comprehensive incident response plans are also essential to minimize the impact of such attacks.