Category Archives: isp

While using Cloudflare WARP, all our web traffic is shared with Cloudflare? Any suggestions to use it wisely? [closed]

Posted on by

We don’t have a threat model, but would just like to share less of our online footprint to a "big"/(any) company.
Q1. Is it smart to use Cloudflare WARP to hide our traffic from our ISP?
Q2. What are some good ways to hide/lessen… Continue reading While using Cloudflare WARP, all our web traffic is shared with Cloudflare? Any suggestions to use it wisely? [closed]→

While using Cloudflare WARP, all our web traffic is shared with Cloudflare? Any suggestions to use it wisely? [closed]

Posted on by

We don’t have a threat model, but would just like to share less of our online footprint to a "big"/(any) company.
Q1. Is it smart to use Cloudflare WARP to hide our traffic from our ISP?
Q2. What are some good ways to hide/lessen… Continue reading While using Cloudflare WARP, all our web traffic is shared with Cloudflare? Any suggestions to use it wisely? [closed]→

Critical flaw in Zyxel’s secure routers allows OS command execution via cookie (CVE-2024-7261)

Posted on by

Zyxel has patched a myriad of vulnerabilities in its various networking devices, including a critical one (CVE-2024-7261) that may allow unauthenticated attackers to execute OS commands on many Zyxel access points (APs) and security routers by sending … Continue reading Critical flaw in Zyxel’s secure routers allows OS command execution via cookie (CVE-2024-7261)→

Volt Typhoon Hackers Exploit Zero-Day Vulnerability in Versa Director Servers Used by MSPs, ISPs

Posted on by

There are approximately 163 devices worldwide that are still exposed to attack via the CVE-2024-39717 vulnerability. Continue reading Volt Typhoon Hackers Exploit Zero-Day Vulnerability in Versa Director Servers Used by MSPs, ISPs→

Versa Director zero-day exploited to compromise ISPs, MSPs (CVE-2024-39717)

Posted on by

Advanced, persistent attackers have exploited a zero-day vulnerability (CVE-2024-39717) in Versa Director to compromise US-based managed service providers with a custom-made web shell dubbed VersaMem by the researchers. The malware harvests credentials… Continue reading Versa Director zero-day exploited to compromise ISPs, MSPs (CVE-2024-39717)→

Breaking down FCC’s proposal to strengthen BGP security

Posted on by

In this Help Net Security interview, Doug Madory, Director of Internet Analysis at Kentik, discusses the FCC’s proposal requiring major U.S. ISPs to implement RPKI Route Origin Validation (ROV), and addresses concerns about the impact on smaller ISPs a… Continue reading Breaking down FCC’s proposal to strengthen BGP security→

Chinese hackers compromised an ISP to deliver malicious software updates

Posted on by

APT StormBamboo compromised a undisclosed internet service provider (ISP) to poison DNS queries and thus deliver malware to target organizations, Volexity researchers have shared. Malware delivery via automatic software updates StormBamboo (aka Evasive… Continue reading Chinese hackers compromised an ISP to deliver malicious software updates→