Threat Bulletin 1016: SYN flood against a developer platform platform in Western Europe
SYN flood against a developer platform platform in Western Europe, peaking at 211.2 Gbps. Mitigated in 0.039 seconds.
Threat Bulletin 1006: credential stuffing against a developer platform platform in the Nordics
credential stuffing against a developer platform platform in the Nordics, peaking at 363.8 million requests per second. Mitigated in 0.574 seconds.
Threat Bulletin 1004: ACK flood against a retail banking platform in the Benelux
ACK flood against a retail banking platform in the Benelux, peaking at 80.2 Gbps. Mitigated in 0.035 seconds.
Threat Bulletin 0995: TLS handshake exhaustion against a video streaming platform in Western Europe
TLS handshake exhaustion against a video streaming platform in Western Europe, peaking at 704.1 million requests per second. Mitigated in 0.584 seconds.
Threat Bulletin 0992: cache-busting query flood against a gaming community platform in Central Europe
cache-busting query flood against a gaming community platform in Central Europe, peaking at 22.1 million requests per second. Mitigated in 0.430 seconds.
Hiring: detection engineers and Rust developers
We get asked about hiring: detection engineers and Rust developers more than almost anything else, so here is the long answer.Challenges beat blocksBlocking lists go stale within minutes when attackers rotate through…
Threat Bulletin 0982: TLS handshake exhaustion against a airline booking platform in Central Europe
TLS handshake exhaustion against a airline booking platform in Central Europe, peaking at 58.2 million requests per second. Mitigated in 0.887 seconds.
Threat Bulletin 0975: UDP reflection (NTP) against a ticketing platform in the UK
UDP reflection (NTP) against a ticketing platform in the UK, peaking at 218.5 Gbps. Mitigated in 0.182 seconds.
What DORA means for your DDoS resilience (part 4)
Over the last few months we have spent a lot of time on what DORA means for your DDoS resilience. This is what we learned.Lessons for your own runbookKnow who can change…
Threat Bulletin 0960: HTTP/2 rapid reset against a tax authority portal platform in Western Europe
HTTP/2 rapid reset against a tax authority portal platform in Western Europe, peaking at 560.4 million requests per second. Mitigated in 0.837 seconds.
Writing your first custom WAF rule
Over the last few months we have spent a lot of time on writing your first custom WAF rule. This is what we learned.Protecting the originNone of this matters if the attacker…
Threat Bulletin 0928: GRE flood against a tax authority portal platform in Latin America
GRE flood against a tax authority portal platform in Latin America, peaking at 57.0 Gbps. Mitigated in 0.624 seconds.