https://routerjockey.com/looking-glass/ A curated feed of news from the networking industry, picked by Tony Mattke. en-us Wed, 04 Nov 2026 09:01:06 -0500 https://krebsonsecurity.com/2026/11/tech-firms-dismantle-botnet-that-turned-1-3m-tv-boxes-into-proxies/ https://krebsonsecurity.com/2026/11/tech-firms-dismantle-botnet-that-turned-1-3m-tv-boxes-into-proxies/ Wed, 04 Nov 2026 09:01:06 -0500 Krebs on Security security Google said today it worked with industry partners to dismantle a botnet made up of more than 1.3 million Android TV set-top boxes that ship with malicious software which secretly rents the user’s Internet connection out to strangers and conducts advertising fraud. Experts involved in the takedown say the action is likely to sever the botnet’s access to more than 10 million additional compromised systems, including other Internet of Things (IoT) products such as Android-based healthcare devices and karaoke machines. https://blog.apnic.net/2026/10/28/the-evpn-trust-challenge-how-to-detect-and-contain-internal-mac-hijacks/ https://blog.apnic.net/2026/10/28/the-evpn-trust-challenge-how-to-detect-and-contain-internal-mac-hijacks/ Wed, 04 Nov 2026 09:01:05 -0500 APNIC Blog routing Guest Post: EVPN MAC mobility enables seamless workload movement, but it can also amplify the impact of MAC spoofing. A forged MAC address can redirect traffic across the fabric through BGP, making access-layer controls, route-reflector visibility, and MAC-move monitoring critical defences. https://www.theregister.com/security/2026/11/03/north-korean-fake-job-interview-led-to-63b-binance-heist/5307398 https://www.theregister.com/security/2026/11/03/north-korean-fake-job-interview-led-to-63b-binance-heist/5307398 Wed, 04 Nov 2026 08:53:16 -0500 The Register security 'It was not a single isolated breach or a simple phishing incident,' exchange says https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75 Wed, 04 Nov 2026 08:53:15 -0500 Cisco Security Advisory security A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to logic errors when secondary authentication is configured on a tunnel group. An attacker could exploit this vulnerability by sending a crafted request when connecting to the SSL remote access VPN. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. https://lists.nanog.org/archives/list/nanog@lists.nanog.org/message/7Y3JQJYX7DZAFSYRZQ4DM76DFA2CH4HB/ https://lists.nanog.org/archives/list/nanog@lists.nanog.org/message/7Y3JQJYX7DZAFSYRZQ4DM76DFA2CH4HB/ Wed, 04 Nov 2026 08:53:14 -0500 NANOG routing I've been building a side project and would appreciate feedback from people who look at BGP data for a living... It is an independent project, not affiliated with the University of Oregon Route Views project. It is built on their public MRT archive (all collectors, RIBs and updates). https://danielmiessler.com/blog/post-ai-security-floor https://danielmiessler.com/blog/post-ai-security-floor Tue, 03 Nov 2026 12:48:30 -0500 Daniel Miessler security I have some critical recommendations that I think every person and company should follow as we all go through The Hackening together. https://blog.ipspace.net/2026/11/bgp-labs-further-reading/ https://blog.ipspace.net/2026/11/bgp-labs-further-reading/ Tue, 03 Nov 2026 12:44:28 -0500 ipSpace.net routing I decided to add “Further Reading” sections to BGP lab exercises, containing links to vendor documentation and useful related blog posts. I naively expected to offload the job to Claude, commit the results, and move on. The “related blog posts” were a piece of cake; precise links to relevant vendor documentation turned out to be more of a challenge. TL&DR: I would love to get your suggestions for further reading as PRs in the BGP Labs repo. https://packetpushers.net/podcasts/heavy-networking/hn849-meter-acquires-packet-pushers/ https://packetpushers.net/podcasts/heavy-networking/hn849-meter-acquires-packet-pushers/ Tue, 03 Nov 2026 14:00:00 -0500 Packet Pushers industry Packet Pushers has been acquired by Meter. On this special Heavy Networking episode, guest host Scott Robohn talks with Ethan Banks and Anil Varanasi, CEO of Meter, about the acquisition. Ethan and Anil explain how this relationship will work (including full editorial independence for Packet Pushers), why it was the best move for Packet Pushers... https://blog.cloudflare.com/zero-wire/ https://blog.cloudflare.com/zero-wire/ Tue, 03 Nov 2026 10:30:00 -0500 Cloudflare Blog security Zero Wire on Cloudflare Radar pairs plain-language briefings with global attack telemetry and remediation steps. Triage critical CVEs faster and decide how to protect your infrastructure. https://forum.ansible.com/t/44869 https://forum.ansible.com/t/44869 Fri, 30 Oct 2026 09:00:00 -0400 Ansible Forum automation As part of the joint effort between Juniper Networks and the Red Hat Ansible Networking team, we are announcing the archival of the junipernetworks.junos collection and the official transition to the new consolidated collection: juniper.device. This decision follows the ongoing consolidation work to unify Junos modules, simplify maintenance, and ensure long-term compatibility with the Ansible Automation Platform (AAP).