Summary: Recent research has identified significant security vulnerabilities in various tunneling protocols, potentially allowing attackers to hijack internet hosts for anonymous attacks. Approximately 4.2 million hosts, including VPN servers and routers, are at risk, particularly in countries like China, France, and the U.S. Exploiting these vulnerabilities could enable attackers to conduct denial-of-service (DoS) attacks and access private networks.

Threat Actor: Unknown | unknown
Victim: Multiple Internet Hosts | multiple internet hosts

Keypoints :

• Vulnerabilities in tunneling protocols like GRE and IPv6-in-IPv4 can lead to anonymous attacks and DoS.
• 4.2 million hosts, including VPN servers and routers, are susceptible, with major impacts in several countries.
• Recommendations include using IPSec for encryption, filtering traffic, and blocking unencrypted packets to mitigate risks.