A reported BGP hijacking incident was used to push a malicious update to Virtualizor, a virtualization control panel used by hosting providers and VPS operators, according to BleepingComputer. The report said attackers abused internet routing to redirect update traffic and deliver a compromised package, turning routine infrastructure maintenance into a potential supply-chain exposure.

Virtualization panels sit close to the blast radius for hosting companies: they manage guest servers, templates, storage and administrative workflows. A malicious update channel can therefore matter beyond a single customer site, especially for smaller providers that rely on third-party panels to operate VPS fleets.

For hosts and managed-service teams, the practical takeaway is to treat control-panel updates as high-trust infrastructure, not ordinary application patches. Operators should review recent Virtualizor update activity, confirm packages against vendor-published checksums or signatures where available, inspect management nodes for unexpected files or outbound connections, and make sure the update path is not implicitly trusted solely because DNS and routing resolved correctly at the time.

The incident also puts BGP monitoring back on the hosting security checklist. Route hijacks can be brief enough to miss in normal logs but long enough to intercept update checks, API calls or certificate validation flows. Providers that run their own address space should monitor route-origin changes and consider RPKI/ROA coverage; customers should ask critical vendors how update integrity is protected when network paths are hostile.

Source: BleepingComputer.