SecurityBGP Routing as a Supply Chain Weapon: The Virtualizor Compromise and SonicWall's Third Zero-Day of 2026
A BGP hijack that forged its own TLS cert and exploited missing package verification in Virtualizor's update client compromised hosting hypervisors across an unknown number of installations, while SonicWall's SMA1000 was hit by its third actively exploited zero-day pair of 2026.