Looking Glass

Google said today it worked with industry partners to dismantle a botnet made up of more than 1.3 million Android TV set-top boxes that ship with malicious software which secretly rents the user’s Internet connection out to strangers and conducts advertising fraud. Experts involved in the takedown say the action is likely to sever the botnet’s access to more than 10 million additional compromised systems, including other Internet of Things (IoT) products such as Android-based healthcare devices and karaoke machines.

Guest Post: EVPN MAC mobility enables seamless workload movement, but it can also amplify the impact of MAC spoofing. A forged MAC address can redirect traffic across the fabric through BGP, making access-layer controls, route-reflector visibility, and MAC-move monitoring critical defences.

'It was not a single isolated breach or a simple phishing incident,' exchange says

A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to logic errors when secondary authentication is configured on a tunnel group. An attacker could exploit this vulnerability by sending a crafted request when connecting to the SSL remote access VPN. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

I've been building a side project and would appreciate feedback from people who look at BGP data for a living... It is an independent project, not affiliated with the University of Oregon Route Views project. It is built on their public MRT archive (all collectors, RIBs and updates).

Packet Pushers has been acquired by Meter. On this special Heavy Networking episode, guest host Scott Robohn talks with Ethan Banks and Anil Varanasi, CEO of Meter, about the acquisition. Ethan and Anil explain how this relationship will work (including full editorial independence for Packet Pushers), why it was the best move for Packet Pushers...

I have some critical recommendations that I think every person and company should follow as we all go through The Hackening together.

I decided to add “Further Reading” sections to BGP lab exercises, containing links to vendor documentation and useful related blog posts. I naively expected to offload the job to Claude, commit the results, and move on. The “related blog posts” were a piece of cake; precise links to relevant vendor documentation turned out to be more of a challenge. TL&DR: I would love to get your suggestions for further reading as PRs in the BGP Labs repo.

Zero Wire on Cloudflare Radar pairs plain-language briefings with global attack telemetry and remediation steps. Triage critical CVEs faster and decide how to protect your infrastructure.

As part of the joint effort between Juniper Networks and the Red Hat Ansible Networking team, we are announcing the archival of the junipernetworks.junos collection and the official transition to the new consolidated collection: juniper.device. This decision follows the ongoing consolidation work to unify Junos modules, simplify maintenance, and ensure long-term compatibility with the Ansible Automation Platform (AAP).