The Internet is Held Together With Spit & Baling Wire
Summary: Lumen Technologies, the Fortune 500 backbone operator formerly known as CenturyLink, disabled the MAIL-FROM authentication method on its Internet Routing Registry after researcher Adam Korab demonstrated that a spoofed email could alter routing records for more than 2,000 of its customers. MAIL-FROM authenticates only on an email's From header, and Level 3 was the last IRR operator still allowing it, though it had discouraged the practice since at least 2012.
What's compelling: Korab's report says a successful spoof would make affected customer IP address blocks unreachable from some or all of the global Internet, with recovery estimated at 24 to 48 hours and potentially much longer in the worst case.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026