Threat Bulletin 0318: HTTP POST flood against a B2B SaaS platform in Southeast Asia
HTTP POST flood against a B2B SaaS platform in Southeast Asia, peaking at 205.1 million requests per second. Mitigated in 0.754 seconds.
HTTP POST flood against a B2B SaaS platform in Southeast Asia, peaking at 205.1 million requests per second. Mitigated in 0.754 seconds.
HTTP GET flood against a crypto exchange platform in the Nordics, peaking at 256.8 million requests per second. Mitigated in 0.660 seconds.
TLS handshake exhaustion against a gaming community platform in Latin America, peaking at 766.4 million requests per second. Mitigated in 0.844 seconds.
memcached amplification against a crypto exchange platform in Latin America, peaking at 20.5 Gbps. Mitigated in 0.141 seconds.
We get asked about designing a risk score that analysts can explain more than almost anything else, so here is the long answer.What we changedWe moved the decision from a single threshold…
credential stuffing against a online casino platform in the Nordics, peaking at 390.8 million requests per second. Mitigated in 0.180 seconds.
Rolled out to all points of presence on 8 May 2022. No action is required. Faster rule propagation: median 39 […]
search endpoint flood against a developer platform platform in the UK, peaking at 729.9 million requests per second. Mitigated in 0.444 seconds.
Over the last few months we have spent a lot of time on how we deploy rule changes to every edge in under 30 seconds. This is what we learned.Observability firstEvery mitigation…
WebSocket connection flood against a healthcare portal platform in the Benelux, peaking at 974.8 million requests per second. Mitigated in 0.558 seconds.
carpet-bombing UDP flood against a fashion retail platform in North America, peaking at 165.5 Gbps. Mitigated in 0.539 seconds.
carpet-bombing UDP flood against a education platform platform in Latin America, peaking at 66.6 Gbps. Mitigated in 0.265 seconds.